last executing test programs:

3.113937218s ago: executing program 3 (id=189):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioprio_set$pid(0x3, 0x0, 0x0)
sync()
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000740)={0x0, 0x1, 0x9})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r0], &(0x7f0000000780)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000d40), 0x40, 0x0)
preadv(r5, &(0x7f0000001100)=[{&(0x7f0000000dc0)=""/86, 0x56}, {0x0}], 0x2, 0x5, 0x6)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000a1feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r7, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x30}}, 0x90)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x1, 0x6, 0x18, 0x13e, &(0x7f0000000100)})

2.564938958s ago: executing program 0 (id=204):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x4d9e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000004cbd18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18)
r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r6, r6, r7, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1a43)
r8 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r8, 0xa3d, 0x4, 0x0, 0x0, 0x0)
shutdown(r1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r11}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe2$9p(&(0x7f00000001c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13])

2.453556801s ago: executing program 4 (id=205):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000001e00)=@ethtool_gstrings={0x1b, 0x7, 0x1000, "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"}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x0}, 0x94)
syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000240000000000119078000000000000000000004e2000109078829c0000800000009000049f346cce61de6eb3904d80b98ba9c76851de35fad3e2451657ef20159e1f3dc82733b642b8d292318b6fa762a2bc7b30d0b6cd8ddd7ab6ccb888cb5e43a204c6e791cce9ac833f769e20da81fb18e638a90a982d"], 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x3bd, 0x0, 0x3, 0xc, 0x1, 0x8}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180500000000000000000004070000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000003880))
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r11}, 0x10)
dup(r9)

2.428760473s ago: executing program 4 (id=206):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xb8e, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x7ff}, {0x0, 0x0, 0x0, 0x8000000, 0xfffffffe}, {}, {0xfffffffc, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x2000, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xfffffff2}, {}, {0x0, 0x0, 0x401}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {0x0, 0x4}, {0x0, 0x9, 0x40000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000, 0x2}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {0x0, 0x80, 0x0, 0x1}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000, 0x80000001}, {}, {}, {0x0, 0x0, 0x0, 0xc1f5}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20001, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x20000, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {0x0, 0x2, 0x0, 0x1000, 0x0, 0x7}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x80000001, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0xffffffff}, {}, {0xfffffffc}, {0x2}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x332, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78, 0x0, 0x0, 0x20000000}, {0x0, 0x5}, {}, {0x0, 0x0, 0x3a006510, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {0x2}, {0x4}, {}, {}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x128, 0x6c, 0x0, 0x128, 0x0, 0x1f0, 0x258, 0x258, 0x1f0, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xd, 0x7f}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x2c8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r7, 0x0, 0x4}, 0x18)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r9, &(0x7f0000000180)={0x1d, r10, 0x0, {0x2, 0xf0, 0x1}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r10, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90)
close(r0)

2.370132589s ago: executing program 0 (id=207):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x100, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={r1, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, <r3=>0x0, 0xc3, &(0x7f0000001c00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0x6d, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1000, &(0x7f00000034c0)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0x0, 0x1, &(0x7f0000001e40)=[0xffffffffffffffff], &(0x7f0000001e80)=[{0x5, 0x1, 0xd, 0x8}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1880000000000010000000004489a1afd4ffffffff00000000e12fe73f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000400)="8b8255088ff35d67005376083c885155e1c391f6c73f55def44f3cb31d88c60fb0f7713d9f2cafa14cbd305758181927b3817e8ddb778f919725ee5febd9f04aca445c54963a3f1585cc09879ce54761b78144a9b45b6f127e7dcf815a0572f79e6cf8ea22d5361608f431a33cbcd5c970b49c8a3d3a43d4439522743fe48bf8971bc6f84152fa8587ba8c456157356afd4aceac94742e45d405ed8be9e7b6759f0e16bfc9a3caf200e944df46e2b2f73384739f9be2c2618a06e75de428196d75b76033f2d9548469338cbccbfb516f31ef8e290db7433b417fbcf4c6c8c24caf96a81f5f74238e0a60", &(0x7f0000000500)=""/188, &(0x7f00000005c0)="02617fb877c5f1b373af5fd7ac1b9a2f0761064c9c1af48d0dd7257e69ee1e45e38b1dfa266ca5cdb9b3e1a9c4554b5ed9201465aa8147b3564435fb7a5ccb5553494dc7c24693cf494f6237b27f982142b2b57f247884122d4bc7c1e497ae2617eb6b91bbcea277857b71813544daa3aeeed89d5ac09c8bf19e4714c8721b3cff980d6b55628e998e2bce6912e377b0b6130c6cb639a37d0da0b4529067a5120bf7960e275dfd4c25d3ff3b89a2e477409e8fb21eb54e91272d172f6e", &(0x7f0000000680)="9257a8faa227d184a1a7e54afa537772f5acab614e3ff941edebddfeab039b77ec70d5f3bfd453bdea410f97f06e3c548bf77a11a9c321dcd8c251dc9e65c2c2ca7a526cadd335c5554645d4b31b13b2a62ab57c3626238db64b61e32698fcdc282533256ba45fdaa748444d43f8bee9eb60da5f69f9cab6378875b02921f58548f72f56491c34de968c271b1199da5078fd307df6bf7dd22df5d816679fa20381f4bed4a9b7727532d75c7fd955813aa86cf3fa851836a2cbfb83ad09879abb673fe4a0ddaf9e91db2d51659c8e82cb3470d6ad", 0x12d2557, r0, 0x4}, 0x38)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000000)=0xf)

2.314083146s ago: executing program 1 (id=209):
socket$igmp6(0xa, 0x3, 0x3a)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000050000000000000700000000001e2e615f61"], 0x0, 0x2d, 0x0, 0x1}, 0x28)
socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1000000000000}, 0x18)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x4)
connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x190da)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x30000}], 0x1}}], 0x51, 0x0)
r7 = accept4$unix(r4, 0x0, 0x0, 0x80000)
recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0xfffffffffffffffd}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$NL802154_CMD_SET_CCA_MODE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r11, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.262374661s ago: executing program 3 (id=210):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000080000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000050000000200000410"], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0xd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)

2.196162328s ago: executing program 4 (id=211):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000080000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000050000000200000410"], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0xd}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)

2.098958579s ago: executing program 1 (id=212):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1000000)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
r4 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc)
unshare(0x22020600)
openat(0xffffffffffffff9c, 0x0, 0x210000, 0x129)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
keyctl$revoke(0x3, r4)

2.075439682s ago: executing program 0 (id=213):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a067f0200ff000000000001000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1)

1.860321636s ago: executing program 0 (id=214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = getpid()
get_robust_list(r2, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f00000002c0)=0x18)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="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"], 0x1874}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000080)={0x11, 0x1a, r5, 0x1, 0x8, 0x6, @broadcast}, 0x14)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

1.740274559s ago: executing program 2 (id=217):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
getrlimit(0x0, &(0x7f0000000040))
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x34}}, 0x800)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000000)={0x0, 0x19, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200048c0}, 0x800)

1.706244652s ago: executing program 2 (id=218):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e23, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xb2000000, @empty, 0x6}, 0x1000, {[0x9, 0x2, 0xffff6710, 0xfffffcf9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c)

1.628028591s ago: executing program 1 (id=219):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x2000000000000348, &(0x7f00000002c0)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000bd7000ff840000020000000400000026c7adb08a58956790c1e58647095e6c3f72875bb96dbdce856fc5d73b9f6a90c8c599662ce6d4bf83f8384730f372cbdeba2d8ad1337411457487f5a2a4bdaa71547ed506034d7cd6b3961640249ddf6f54119de24a2024e36d58e692a82543ce3f24cffab92f9b3300"/137], 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0x2000000000000242, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = socket$pppoe(0x18, 0x1, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'ip_vti0\x00'}}, 0x1e)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e028008500000070a3d794d77a7795922f369906814402fc6d98e17da88d10515fb4dc1400a3466a9dfe78f923600c3960f5df9f0af838a79e335c57457496a57ce6cc1673345c946bcc8a167a7a0369f340e12526b4066f7129862852ef5898bd26d3be05c9710d2047d6e930f24875d9010e70fc"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r7, 0x0, 0x1}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='timers\x00')
copy_file_range(r5, &(0x7f00000002c0)=0xc246, r9, 0x0, 0x6, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r11, @ANYBLOB="00000700000000f55760d6dc620acbcc6e03211edec188dc255186337340d45c2789f92c0ffa029885e49b70de5aeddba33c491477cc1c58d6f1b110056d7bdbb652318804f98178028f52110becec5f841dedea6e417c2163a569a4ad8561584bbe8ac64d56826ca589aa9c838b90ac600c025eed0108edd2f7e51634f5c75fb330816dff4f9543e7dfb197655021126d01f249a9e2b5a40f1bb8082579245ba250e968bce9799c11b06873fcbde99c6af010c1dafc70312a6245b0facf1ba7b021b5b3effa7623094aabca130c912f10be0f03e81c6580b439d0d702b6c35313"], 0x20}}, 0x0)
socket$inet(0x2, 0xa, 0x2)

1.627520851s ago: executing program 0 (id=220):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/sync_on_suspend', 0x44801, 0x113)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000800), 0x2000022, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',ignoreqv,debrg=0x0000000000000007,pcr=00000000000000000011,smackfsroot=,fcname=-%#@}!&+,dont_appraise,permit_directio,fscontext=root,\x00'])
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1)
sendfile(r12, r12, 0x0, 0x2)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r13, r5}, 0x14)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000100)={0x0, 0x3, 0x401, 0xe4f, 0x7ff})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.561173598s ago: executing program 2 (id=221):
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xa)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x2, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @ib={0x1b, 0x8, 0x2, {"9926c7df15e0080027eb3c874efd659f"}, 0x5, 0x6, 0x6}}}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e23, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xb2000000, @empty, 0x6}, 0x1000, {[0x9, 0x2, 0xffff6710, 0xfffffcf9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c)

1.3667137s ago: executing program 2 (id=222):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000040000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
futex(0xfffffffffffffffc, 0x80, 0xfffd, 0x0, 0x0, 0xfffff7fe)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x5c, 0x31, 0x53b, 0x70bd2c, 0x0, {0x9}, [{0x48, 0x1, [@m_sample={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a2f2f9bb2c23128d02390a3243a5d9f447"}, {0xc}, {0xc, 0x4}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r3, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x8, 0x20, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10)
getsockname(r3, 0x0, &(0x7f0000000180))
fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ip6gre0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', <r6=>r5, 0x29, 0x9, 0xa3, 0xffffffff, 0x0, @mcast1, @mcast2, 0x8000, 0x20, 0x8}})
sendmmsg$inet(r4, &(0x7f0000001f40)=[{{&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000ac0)="b73f9658b2be28ce1217a7c9ca6069b88223434864fcff0b78daed987967269547325a9f208265d80b73c67f6984f2dd30372f06fca315b063832e64b6189250dcb27d077d5f9a288d72a0bf58e8ba9f3dfab961e52d804183c28b0c7fbdb550c42fea62e3f97c39b83d7fa24d140287453bbaaa1cf263cea3e39ce342ce53112c0f1896e9806ea6b9350f163ef1dfac8b8d74121015c2be0d72582862c87cd105959fd81bca07d405d15cb8e7a061ca3f8fa8700c5c08e214eba5321f8f0510c0932f353b6d17920ae437bce07dd1dc6305f8420185c7a30687ebd15c0df94e550237fb", 0xe4}, {&(0x7f0000000300)="57a377", 0x3}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000340)="34b3b5498771ced353fc05431f93b05fcb3b34ccdd217fedf7e4b8e916bae72ce2f7361e64eef30edb324f4429776ad8bd5a2336cb334155cf8d588f825724", 0x3f}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x108}}, {{&(0x7f0000000840)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000f40)="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", 0x1000}], 0x1, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdd5}}], 0x50}}], 0x2, 0x40010)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})
sendmmsg$inet6(r7, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000a00)="49498702", 0x4}], 0x1}}], 0x2, 0x4040855)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x4, 0x10, 0x3})
close_range(r1, 0xffffffffffffffff, 0x0)

1.27180137s ago: executing program 1 (id=223):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x1ea, &(0x7f0000000a00)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "c903f1", 0x1b4, 0x21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, {[@hopopts={0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}, @srh={0x33, 0x6, 0x4, 0x3, 0xf7, 0x40, 0x6, [@ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, @hopopts={0x62, 0x24, '\x00', [@calipso={0x7, 0x58, {0x2, 0x14, 0x9, 0x5e, [0x2a18, 0x1, 0x4, 0x8, 0x80000000, 0x5, 0xc6, 0x3, 0x7fffffff, 0xd]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0xfffd, [0x9, 0x5]}}, @generic={0x3a, 0xa7, "3ed78ccde7e2366d1139bc6fdd6f97f451cafd6360195904d5ddcba940982e023294a2f4168d125957bfdc4502ffe33a9c891add8fbb0d1fa00ac46f378a92d99e381c6c12f33ec62735a6a842a6eb1f0292a3d1925076d06e8db7b197d8b73ed87cc5aacfca5aa86b17ec1ea8eb8db13e18e9327a1620bc3980908abbc2a16b7a6fd7f7be4c816c80bd16a0da75967fd5289bb7e47c0ee990ea3d2f4486f1cd350318b33aed72"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x3, 0x0, 0x0, 0xa, 0x1, "baeffb", 0x1, "c4cdb3"}, "96116bb401bdbbbb6c0be97c4fa7bd6f5ef775108991b19417ddf50e4fd418da7d8ff035bb1605ecfe3dea2d"}}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$inet(0xa, 0x1, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000300000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x40000) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000300000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x40000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="400000002000120234b6250000000e0001000f004cc8ba7b07918b851e2729300000"], 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

1.08910198s ago: executing program 2 (id=224):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="a9", 0x1}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="10000000000000e04d00000005020000"], 0x10}}], 0x2, 0x4004800)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xb5, "f136f5", "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"}}, 0x110)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x12}, 0x68a5, 0x4005, 0xb, 0x7, 0x1, 0x1, 0xe805, 0x0, 0x0, 0x0, 0x34f413c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x8000000000000001}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f00005a9000/0x3000)=nil, 0x3000, 0x2, 0x10010, r3, 0x1000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='wbt_stat\x00', r5, 0x0, 0x2}, 0x18)
statx(r3, &(0x7f0000000200)='./file0\x00', 0x100, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f00000007c0)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'dioread_nolock'}}, {@subj_role}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_gt}, {@uid_gt={'uid>', r6}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$eJzs3E1oXNUeAPD/nXz26zXvvb6+176+Z2oVg8WkTavNQpCKggsFsYK6DElaatNGmhRsqTIFqUspuBeXbl24VTdFXAlu61KQQpFu2griyJ25dzIzmUmaSTJjmt8Pbuace2fuOeeee+6ce07mBrBlDad/kkr4VkTsjohC4xuGKy/3716denD36lQUS6VTvyblj91L45lsN7Eji4wUIgofJYsbasxfvnJucnZ25mIWH1s4/97Y/OUrz5wdzNZMTCS9bRaqSXppue7t/3DuwL5X3rnx2lR1z3lqteVYL8Mx3CwrZU+ud2Jdtqsm3Ha90XHp+Z9WV1+5/e+Onliu8oodzBmw0UqlUmmg9eZiqdG1JWuATSsGu50DoDvyL/r0/jdfmnUE+jem+9F1d05WboDSct/PlojHyivzcZC+hvvb9TQcEW8Xf/ssXWKDxiEAAGp9czLvCTb0/4YqMyO/X7r5Qvr6t2wOZSgi/h4R/4iIf0bEnoj4V0TsjYh/R8R/GvbfExGlZdIfbohX069OQhVur1NRm0r7f89nc1vpsjj3VQ0N9WSxXRF5h3nmSHZMRqJv4PTZ2Zmjy6Tx7Us/ftJqW23/L13SPOR9wSwft3sbBuimJxcm2yvtUneuRezvXSx/pf+b9EYk1ZmAJCL2RcT+Vex3qCZ89ukvDlQjffXvW7n8ZaWm82jrMM9U+jziqUr9F6Na/qibREzq5ifPT56ZOTNzYXxi4vixoyeeG392bDBmZ46MpWfBkaZpfP/D9ddbpb9i+b/6ufEjL5/4+lTWstYurf/tNed/5PO3i+UfSiKS6nzt/OrTuP7Txy3vado9//uTN8vh/L70/cmFhYtHI/qTV5euH1/8bB5PX6NYKf/Iocbzv5xu+RqXH4n/RkR6Ev8vIv4flTvENO8HI+LxiDi0TPm/e/GJd9sv/8ZKyz8d9eWv1Hxd/S/O17cKJNncYN2m/kgDPecO3nrQ4uLxcPV/vBwaydY0v/4ldZeIVjnNv+3SNX+s+egBAADA5lCIiJ01Y0k7o1AYHa2MAe2J7YXZufmFw6fnLl2YTrdFDEVfIR/pqowH9yX5+OdQTXy8IX4sGzf+tGdbOT46NTc73dWSAzvKbT4pjEa81VPT/lO/rM8QM/BX5vdasHUt1/7TTvzeGx3MDNBRD//9f/ODDc0I0HE17b/VL/yLbfzfF7AJPPT3f9LyeTbAI2PlB/0YM4TNr6Qtw5a2qvZ/2EMA4VHSG29Uw4Wu5gToNP1/2JJW/F3/mgKlgeabBmPpm2Nw+R32RHvZ2NYkra4E0p5VV1Lf1s6n8omelu+Jwup2OBD1a/rbrNPTazwaxYvzZ/Yunvz5s0XWeJxL2f/Kr3cNftmRdtos0PFLEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb4MwAA///GJdfC")
pipe(&(0x7f0000000380))
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)

595.696314ms ago: executing program 0 (id=225):
r0 = getpid()
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
read(r3, &(0x7f0000000100)=""/125, 0x7d)
io_uring_setup(0x1de0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_pidfd_open(r0, 0x0)
r6 = pidfd_getfd(r5, r5, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x8, 0x80000000, {{0x6, 0x4, 0x3, 0xa, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @loopback, @multicast2, {[@noop]}}}}})
setuid(0xee01)
setns(r6, 0x66020000)

357.93805ms ago: executing program 3 (id=226):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7e2ffff03000000b7030000f8ffffff85000000040000009552c3bd473e3f6093d6c021d65023059cc1d18218f6451a23d65de897f98a7ee3e0f4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10)
mmap(&(0x7f000027c000/0x3000)=nil, 0x3000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e60803dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x100003c}, 0x18)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ishtp_dump\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x20000000080001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x5e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendmmsg$inet6(r6, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8927, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x13\xec\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0)

269.7885ms ago: executing program 1 (id=227):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x90d0, 0x9, 0x0, 0x6}]})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

268.73746ms ago: executing program 4 (id=228):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone3(&(0x7f0000000000)={0x170e4020, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58)

168.340061ms ago: executing program 4 (id=229):
r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) (async, rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (rerun: 32)
io_uring_enter(r0, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18)

164.877622ms ago: executing program 3 (id=230):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x43, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018010000756c6c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18)
setitimer(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
iopl(0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000b)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf)
acct(&(0x7f0000000040)='./file0\x00')

121.610046ms ago: executing program 2 (id=231):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x4040881)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00))
recvfrom(r2, 0x0, 0x0, 0x2000, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x1a0ba7d6, @loopback, 0x7, 0x2}, 0x80)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
r3 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xec26, 0x200, 0x80000000, 0x41000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x10})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r7=>0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0xc, &(0x7f0000000480)=[{0x2, 0x1, 0x2, 0x8001}, {0x1, 0x3, 0x8, 0x3}]}, 0x10)
io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}])
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)
setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f00000004c0)={0x401, 0x1, 0x2, 0x0, 0x1}, 0xc)
pipe2$9p(&(0x7f0000000540)={<r9=>0xffffffffffffffff}, 0x4000)
pipe(&(0x7f0000000380)={<r10=>0xffffffffffffffff})
io_submit(r7, 0x3, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1000, r1, &(0x7f0000000780)="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", 0x1000, 0x7065, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f00000000c0)="1f9af1204d", 0x5, 0x6, 0x0, 0x0, r8}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000340)="18207f2b251eced30aca17078906ab4639fbb62bfedd7a1aa00f", 0x1a, 0x4, 0x0, 0x0, r10}])

92.999579ms ago: executing program 4 (id=232):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async)
sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty, 0xfffffffd}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5000000010e41ae9b77b8f523d00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000300012800b00010065727370616e00002000028004001200060003000200000006000f00ef210000060011004e230000"], 0x50}}, 0x40080c0) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x4}, 0xc) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="3015f800", @ANYRES8=r3, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0, 0x40000000}) (async)
fchown(r3, 0x0, 0xee00) (async)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) (async)
syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000080)) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
io_setup(0x559, &(0x7f0000000280)) (async)
eventfd(0x800) (async)
ioprio_set$pid(0x3, 0x0, 0x0)

61.321603ms ago: executing program 3 (id=233):
syz_clone(0x100000000, &(0x7f0000000000)="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", 0xfb, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="e99ce7d2e967889eabe3dee51dfc9196ced4ee3cd479403c998ac2ff93182cf9f28613fedb1d41543a9d353b79c2c9418a5fe78d41e9a4ea8dad635657e868b88d661bce92496bb56fee1834581c2a2be5d8430b7c0a816c02ed07af339ef853e58cc070e14371c96e8210f18f203efba36d4d06505b7fe0c8abed082efceecc1d5deb43b98133e7c9d3e7ba99c90570a4c74a38a2205071f257c7be1865642cd40332eaeb7b00764f7152d49f9535d7ed86e91b1d49472c74325bf4bc24912ddc6e59aed35e560059b00831f79f2234677fb4ddc01ea5353bade0939187d4c3e5ffacb2d7732092440f494ffd5f9004049266eb9715f0daff56e849c4412982029adbe1a84666eed0831208856d02546000a5f6ad9cfbaa61ef49b7895ac6975b464c55c4346c09d21afdb2e0e510d672db9e472d9cbe5d6d133f8cf595ed58d5a142dc864da0a682fa4da86df7c1f86ff784396bae66a7558430fe177b17225dcacb773347b918ff138305df710f0462817151cd451ddf66e0b86324828eadc13bfd00d22046d6139c4de0f987bbf3b11e2dd4c23d8eb4f179f51847f848847e727b87b0a61cb052806fec16169b1a8bf0a14245cdd4e1e60ac3c095b2f82e6f0e3228078be400ef85a766e79552d01ea100b14f15abfbcb6b8616b427dc5cdfb4027918cf10eb65da6b87673e0c626e51efd65a8c96851d2210830e0ef875824ad58dd389b7743affb178f955b75d120efacb1ff75d6bc4da41c3f2b7f74327af94170147aa9fedf0f0294c058d0afca58e3068821768e45c9d48948fb35fd9d3d1224732a24893b6bf5d2d08bc7594b593fa8a41a78861de722d71a576ab9456ca6ea0f44c128b34694dfaa911e5f64b07a0f1748352a3c113161d0c6b018a757f4d6f0f99577c9c1c3125edc3180da8c83ee9760bd38476f2a4c96140495accecbf1d2df2fda309ad4e3472242e5cc17df79132131e9e5a2fa28b0e6980a74b608386b6964364f7fb52e1d4ad9b9bbc158383876cacabdc8dd563d5616f2d0ae5ba3282fc75cfb22620e0b99781232aeda599694003432d9883eccb6be166a13cda525b03e5f76ff7af1943e6e6fb6b66f2d61ab52ca696f46d9c8a8393cb6bbcce2a76f7b61ccd0c386214ec5fc3dc8c5435a67ce54ccd8482b120c87309a95866a489155c772dab9ba72594b8f23fbf6837370da19f7cff849f568abf106f973c41f12f780c73e7f89b73f9d7ab394c780a9c9ead01d4ebf2a8c1416c2c42a1cbd45d7d556ca074f3fc2de2dddd28bcade92d6c076abc2911c6134699ba4f854f8c8a1d8dcdd21f609c8a59af41df06586d84d54781d307c5c94b9482f82838b13e4b4a1232215f0e149a12cb01189d2ec8a396fd241c5a20d56f826fd698bde7a4ca5d7f48f9bd875c1ec9128e5adea8f7c137edeec4cb6e18293e16f49eb19e4bb51a9383b219af9988e6f7d107e482a8273ceaf0ba308d62127155f52e946d7eba1ba5b24efcdb03ee5aa135cc1d0ce3d671c222a2e4c0603f70cb14c555a5234691e2c0b754ebc1bd8337c5f980b3f23a0e327f88b1baaaa09a1702c7cc92f1efac48a150f4f8d956b39ccd0b3bb6339e5cf4524e36d9b093b6218640514ebfb53b8c9ef2fd38f735cb3e12ba73094eecc562b10ae90982b08dbbb1ae4a03e08b7600bd2a1956198388da4e4e4a109033127e6c400090051335ee060b4da64dba96607bea20026fda318acdffc92925c29dedd445387d1b7f9b9d4081650c3d62fa1399404e800d988890189fd6a65eb09de2f63b9e86e89d6824df7a1afbd6eabedaf79c1200e03d579ad7729642d05ed4b8edb355a4bd03088d42328b6a393e6ba0e1eb0d116210ae0d110ab218f4eb67c7823f235fb1645e87ac1a86508fe04b407549c3c57af7c194f6016bee0f6449d40f593b41b72d9ee9d901d4d20ef62005a17737cbfe9087968268baa3ada61c52de95bd91835de97f078ad9662d2a5578c25f8798ed9cf27afd129587f43c9b885a2274ae59c0a9d5e86a20179263483d905da6912e17697ffb7016823aed2d157cbdaeb9aca342994ae58b8b01c0ab1ff153399b03ffeae12853845843ec68973567ddc9c3b0475ecc6fcb9e87a3170a8e483835aafd5d78c6fd2e4f3aaa6965cfc2521494543242df9eee62307b3d6bb4159b3a11424caa03e5d3887fab323faeff61dc4b75bf50c31023d58d1b7106da4cc26a3fd0ce0aa6e060530ecf3b8fbd3c0ce281e47f84a5cff156e2526aafc03fc7807e7b77ece28ac27e11c6ce390540b7dbeeb80eb533a7a0b6a429f7cc872909d5c99e2470f1be837cf94ae010c0d20499dd70e57cc517d6385dc84ccea1db71c080defe1e4b2596bd3c9eed771ba61fe7d85e68074052b8b9cd861f5c40ae0d366cddf86ece681d1352a195c8c541175132c92e6b47c8030872e635cf6671b5880f603f10a4869cbe2a5eb5fe6d272ce92fba20702179a1440d7e78068a329fd5fe8eef59183f781a8a4d05c9157751bbe638b90e2711000fdab0aa278fe9186c981c2e80912aae7f9643f9aaacb5a5a14e473153b5508c2042160cad2ace01d1b67dff8d508c3a48972b09464c12c9dde9da6d0f8b0cec9eb508e3d5d00bbc197b097498247c755006803461eb5fc6b01de79f5667fc869868cfa1c5d6184098194653e627c9e9711578e1e480ddcec6d8d22c67a27c29bcbb65ebc1fccee466a98b7df7867730ca23c48fce0ec43b2225df66ab39d176269d87df62c1de6b99de99f35e09ab41c71d165b2fb57bf0c4630bc7d26fa23b2c0a72a7373ffd0d16e1b960b1d4016bb0af8f391464240239e5f9df479a7eecc9e97fd6775df4c01a8622351e83b6009681a806d228fee1f896a863d7c339570b7dd38a9526bc0880d24fb8b47f3d943bfc08c627e43ea3c50fdbb679651cb6af3f4263ebfde551a9a0382859a73aa8cf0cabae41140898c481fedbccfc1b2ac2ebae36978f844874da4753340cba5c27481f6eb3972320506ead4c543612dfa6cb44ebe977879ad7f36a91a23c3b8406449a0f4fc437f48c0dd89616f64b9e778c877ebb3142470d97a7dcd24702d0378cf7f4a8fd08b1664b291023c678cd131c8e74500ed545ba9d9ccb4835fc5087ec6bc1e5a379ba5a52ed4f2605a962e5f015e3e359be51ba62877bb890f31e3576ea83670a4496eb86c73525c8aa39c978fb5ddaefd6e58317e4182a6d313b2868d7f7f21e7ddb9979ef2975703b70ce1da004478136354ed58e163140e14da9ac139b50d73e0d3a4901bbff7c8246062232d72c999ac6b2254feb5aff02dbe00df440d0132ace8064c1a949d3487eb54e85b13874b4dd97537057f40c7536b50ff0774c0fe1402fad94567a450dc936d7f346fe9daf8fb86d9d2ede7ee49275eac5ee979f1d28e81e24be47f2c85cc71c50483a1ec608ab0a0d65e6a3319336a395cecacefb1f31e804b668df34a0864070ccc4b4ba222d6fbfc1359f3cc8d49351f060afd48563a13df33345bc95b8578e3197fde312d3a0a5d376f0ef1a785dd2fa63c02885298c8fee1e35b9afd99a62ac8036efab407604bfbc9cf9755d8d08c96c9f2bf80a627e8f52fce357d8af483ab8d18a17ba326c4d3321b2038de478d0bac271fb985a9c6086d47b0d571c534bda4de454eff3a9b29000e833f5955c473c509cd3acac049786d9ebcbc560e46c9ec5d34455a299df2c00d4dfff5e5557da3656ac743fb6481b2e6380b3889a869e081761137e6549d5b8d948c53f9e1a2b3d40759f93231694fa3494d1b84db0ec7df0c6c921467e65819b986972ca925d42b68b8aa9e5d96202cdf37fe4da2d5d4f1770fa783c39c3223b5be9a5ae2363e7d40b91dbbc14f7487fe394187e3b67e74aab78cd33df306fc9c2d95367ddf5cff1701fac37bccac28f67a700dc8e2ca608361cd16961362006f03cd08e0baa89e855f66a872786346a0c91ec0258d741e5e596a72ec7c54e4c6b4444702ddd328be469a7819353dc8397f4a3c85b2979142c5e20d555f179f3b08442a0bb551ee4cfdab729cf7b3a3ab1acf0f3373612351feb91c52f05b81413339c57d78a1ca06dbd44cc0e506870a2fc9f629cd8116ca4820355e888fd7b0d2dc723ea5ddc1652ab143a65c558ffe06bf816cab4c503f39aef7f7e1596d615a2c6f91ec3164c702b8bca9052aeff51e6ee24020711204ddefb00dae6d7398203705c263c3e90461d8eceb77ed0eb7233dcecadc113778c792e099b92dbdaf5ce590716da841032ca9d8b7ad2f9cb90de2a9ba1fbbcd79c7a2d121e5ffb56c50b3ccea75c27c5391e2187d1416ac18c30ac9d53bf65ab15c5b62bbcc7c3fd3e9fe2dd6208abc74886d39b620c81e305c2d275072ac1445f850f7af88343f7fcf5c79d2c1c52fe3db8ed0ff48baa28cd4be6ef20f244c92546de76e56b74b0983eb4b95fd6610b40816a20172ce810edc37bd610a814345b9f2a92ff2f036cfe8775701c5f4a0c04fe1f64dbbd030ad3298112fd384231054655c7ca66ad8cf475c73f531b5099b0a09f86065701629b75863398e3975ba113c46bf791268dfeaf3c45fe395dbe948c95431c084958ec0b9df6fb2f53a0a3c583d7a4705819b1b1d1f717ea028816209d449d95c770acad1b09f393ca4bda53111bf1fc6d913403a9bdf9e4b2476246600774212defd5aae56a2cf77497c0b15b5a4bf47dc5ab32dfd0003b93713cf081ca230546a791571e1e444a52574016b9b3cbd1d543bd582ab06bd61c31640bbdcb45ba13aa9efcd155c9d224881b0f224f4515919b659edaf29aa9da99c08fce06fd1ad5804185410d91a1bc46a1e7af31e6657953543134a9b34233f99d0321bde5dcb39a61a150d19a9573766a25d4745554b0b48f16c93d671c1d110bbd6f244205a05e38e469fe7665506f844165cf8cbe6c149538cd5dbdb4840419e5e0d3bc6002c88a9e12d81d10a5024097e27ecb19845786b32e8854d745a64bb8ffe89dfd6f3884a9c89cabdceef52305a01c5a346cdd1272a639cd0ae03b76651ea16d9ffbbf782227abc40a04ff255d473aed4b5ab0f246070ca66b87bab54e8013d91bdff0f8881e8d9114b220ea6bfa1c5dfedf3b75ea5f35f8c95a8521dda23485c49d6622e8f4cbac27aeb9ac911edb2a4011d9b6dbcb79b2f1985ea73d96f390afd71ecc113b2db1ff55f05e76bb8bcdc11714202462a4163d6904cd7583113d67497e1627a73bd47586937fad7e194129d3af8f283f7ceeec94b12f5834c8ff007d7dff7605ea2face64258ea34558fb7b5399ded9ec9d5d87190f1ee627cfb74ce59d7110edd05d2e8dfa44377e003bfcd0150000f2e38681caa0060fbbd3bce24588008c62cc196084beca17fc94e4b8963ad4be91cb7fc769e96c28ca6735b96085399a53f1d6465814e3bd11633942dfa6eb46826e421c8998cbaa1634237a447bb903d023bfa0c2b7f38262483313591a1ca7f3678939dc94188af97b2256f8be891f452c9c21535d932f99330f356d169cba5edaf5e6e11ff0c9892fd5830e6839b45f7702689580f0298e2e70e758250ace13c69457092e0e041de901368a86c3f42a7ee6995a91a87284ee313ab07d740d71212f0a6ea9f3c78c3d454d472ac617d094f1274b0c051a779dd919be21bd9689f940a46a6d226f1316f6538f7bfdffb306b911f1278a11f48e274c8238b0bbac22039cb86e2c5005dbcb65a2ea2a0d1a9c4abde87cfd5d45112eb83b36e4a452d49dea814085cc5c2ceef")

57.421514ms ago: executing program 1 (id=234):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r0, 0x0, 0x0, 0x12e, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4008800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x7, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048084}, 0x4008008)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
mq_getsetattr(r5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mq_timedreceive(r5, 0x0, 0x0, 0xae02, &(0x7f0000000140)={0x77359400})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x308002, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0x3)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r3)
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)={0x338, r7, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5a1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00', 0x13c}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x526b, @dev={0xfe, 0x80, '\x00', 0x20}, 0xc4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @private2, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x956a}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xddec}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb42}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x10}, 0x4040)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
r11 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
pwritev(r11, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r12=>0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r12], 0x1c}}, 0x8004)

0s ago: executing program 3 (id=235):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x100, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={r1, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, <r3=>0x0, 0xc3, &(0x7f0000001c00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0x6d, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1000, &(0x7f00000034c0)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0x0, 0x1, &(0x7f0000001e40)=[0xffffffffffffffff], &(0x7f0000001e80)=[{0x5, 0x1, 0xd, 0x8}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1880000000000010000000004489a1afd4ffffffff00000000e12fe73f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000400)="8b8255088ff35d67005376083c885155e1c391f6c73f55def44f3cb31d88c60fb0f7713d9f2cafa14cbd305758181927b3817e8ddb778f919725ee5febd9f04aca445c54963a3f1585cc09879ce54761b78144a9b45b6f127e7dcf815a0572f79e6cf8ea22d5361608f431a33cbcd5c970b49c8a3d3a43d4439522743fe48bf8971bc6f84152fa8587ba8c456157356afd4aceac94742e45d405ed8be9e7b6759f0e16bfc9a3caf200e944df46e2b2f73384739f9be2c2618a06e75de428196d75b76033f2d9548469338cbccbfb516f31ef8e290db7433b417fbcf4c6c8c24caf96a81f5f74238e0a60", &(0x7f0000000500)=""/188, &(0x7f00000005c0)="02617fb877c5f1b373af5fd7ac1b9a2f0761064c9c1af48d0dd7257e69ee1e45e38b1dfa266ca5cdb9b3e1a9c4554b5ed9201465aa8147b3564435fb7a5ccb5553494dc7c24693cf494f6237b27f982142b2b57f247884122d4bc7c1e497ae2617eb6b91bbcea277857b71813544daa3aeeed89d5ac09c8bf19e4714c8721b3cff980d6b55628e998e2bce6912e377b0b6130c6cb639a37d0da0b4529067a5120bf7960e275dfd4c25d3ff3b89a2e477409e8fb21eb54e91272d172f6e", &(0x7f0000000680)="9257a8faa227d184a1a7e54afa537772f5acab614e3ff941edebddfeab039b77ec70d5f3bfd453bdea410f97f06e3c548bf77a11a9c321dcd8c251dc9e65c2c2ca7a526cadd335c5554645d4b31b13b2a62ab57c3626238db64b61e32698fcdc282533256ba45fdaa748444d43f8bee9eb60da5f69f9cab6378875b02921f58548f72f56491c34de968c271b1199da5078fd307df6bf7dd22df5d816679fa20381f4bed4a9b7727532d75c7fd955813aa86cf3fa851836a2cbfb83ad09879abb673fe4a0ddaf9e91db2d51659c8e82cb3470d6ad", 0x12d2557, r0, 0x4}, 0x38)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000000)=0xf)

kernel console output (not intermixed with test programs):

[   22.588084][   T29] audit: type=1400 audit(1767972909.288:62): avc:  denied  { search } for  pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.610085][   T29] audit: type=1400 audit(1767972909.288:63): avc:  denied  { search } for  pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.633386][   T29] audit: type=1400 audit(1767972909.288:64): avc:  denied  { search } for  pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.656384][   T29] audit: type=1400 audit(1767972909.288:65): avc:  denied  { search } for  pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.679393][   T29] audit: type=1400 audit(1767972909.288:66): avc:  denied  { read open } for  pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts.
[   29.128714][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   29.128731][   T29] audit: type=1400 audit(1767972915.828:70): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   29.158033][   T29] audit: type=1400 audit(1767972915.858:71): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.160284][ T3307] cgroup: Unknown subsys name 'net'
[   29.185927][   T29] audit: type=1400 audit(1767972915.888:72): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.297991][ T3307] cgroup: Unknown subsys name 'cpuset'
[   29.304261][ T3307] cgroup: Unknown subsys name 'rlimit'
[   29.516091][   T29] audit: type=1400 audit(1767972916.208:73): avc:  denied  { setattr } for  pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.539526][   T29] audit: type=1400 audit(1767972916.218:74): avc:  denied  { create } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.560667][   T29] audit: type=1400 audit(1767972916.218:75): avc:  denied  { write } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.581113][   T29] audit: type=1400 audit(1767972916.218:76): avc:  denied  { read } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.601555][   T29] audit: type=1400 audit(1767972916.228:77): avc:  denied  { read } for  pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   29.622503][   T29] audit: type=1400 audit(1767972916.248:78): avc:  denied  { mounton } for  pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   29.642614][ T3311] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   29.647462][   T29] audit: type=1400 audit(1767972916.248:79): avc:  denied  { mount } for  pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   29.697465][ T3307] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   31.031168][ T3318] chnl_net:caif_netlink_parms(): no params data found
[   31.062241][ T3325] chnl_net:caif_netlink_parms(): no params data found
[   31.071245][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   31.154068][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.161370][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.168781][ T3318] bridge_slave_0: entered allmulticast mode
[   31.175622][ T3318] bridge_slave_0: entered promiscuous mode
[   31.184760][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.191914][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.199148][ T3318] bridge_slave_1: entered allmulticast mode
[   31.205696][ T3318] bridge_slave_1: entered promiscuous mode
[   31.222537][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   31.272798][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.292240][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.299486][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.306778][ T3325] bridge_slave_0: entered allmulticast mode
[   31.313480][ T3325] bridge_slave_0: entered promiscuous mode
[   31.323283][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.332773][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.340051][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.347625][ T3317] bridge_slave_0: entered allmulticast mode
[   31.354179][ T3317] bridge_slave_0: entered promiscuous mode
[   31.363698][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.370828][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.378116][ T3325] bridge_slave_1: entered allmulticast mode
[   31.384596][ T3325] bridge_slave_1: entered promiscuous mode
[   31.398224][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.405337][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.412547][ T3317] bridge_slave_1: entered allmulticast mode
[   31.419088][ T3317] bridge_slave_1: entered promiscuous mode
[   31.431165][ T3322] chnl_net:caif_netlink_parms(): no params data found
[   31.473754][ T3318] team0: Port device team_slave_0 added
[   31.488559][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.495675][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.503004][ T3321] bridge_slave_0: entered allmulticast mode
[   31.509442][ T3321] bridge_slave_0: entered promiscuous mode
[   31.517308][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.528051][ T3318] team0: Port device team_slave_1 added
[   31.534896][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.549179][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.556298][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.563619][ T3321] bridge_slave_1: entered allmulticast mode
[   31.570326][ T3321] bridge_slave_1: entered promiscuous mode
[   31.577795][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.593039][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.638119][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.645157][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.671845][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.691211][ T3317] team0: Port device team_slave_0 added
[   31.698024][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.708254][ T3325] team0: Port device team_slave_0 added
[   31.714470][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.721480][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.747505][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.764406][ T3317] team0: Port device team_slave_1 added
[   31.771169][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.781044][ T3325] team0: Port device team_slave_1 added
[   31.815984][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.823200][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.849339][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.860201][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.867444][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.874724][ T3322] bridge_slave_0: entered allmulticast mode
[   31.881534][ T3322] bridge_slave_0: entered promiscuous mode
[   31.899400][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.906431][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.932807][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.946324][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.953763][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.961271][ T3322] bridge_slave_1: entered allmulticast mode
[   31.967945][ T3322] bridge_slave_1: entered promiscuous mode
[   31.974546][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.981580][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.007496][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.018898][ T3321] team0: Port device team_slave_0 added
[   32.037451][ T3318] hsr_slave_0: entered promiscuous mode
[   32.043710][ T3318] hsr_slave_1: entered promiscuous mode
[   32.055235][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.062250][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.088279][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.100086][ T3321] team0: Port device team_slave_1 added
[   32.140383][ T3325] hsr_slave_0: entered promiscuous mode
[   32.146891][ T3325] hsr_slave_1: entered promiscuous mode
[   32.153031][ T3325] debugfs: 'hsr0' already exists in 'hsr'
[   32.158808][ T3325] Cannot create hsr debugfs directory
[   32.165494][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.176121][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.204232][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.211261][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.237272][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.258654][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.265680][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.291654][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.313167][ T3322] team0: Port device team_slave_0 added
[   32.331361][ T3317] hsr_slave_0: entered promiscuous mode
[   32.337677][ T3317] hsr_slave_1: entered promiscuous mode
[   32.343552][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   32.349388][ T3317] Cannot create hsr debugfs directory
[   32.358316][ T3322] team0: Port device team_slave_1 added
[   32.406769][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.413799][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.440078][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.461915][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.468917][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.495035][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.515532][ T3321] hsr_slave_0: entered promiscuous mode
[   32.521829][ T3321] hsr_slave_1: entered promiscuous mode
[   32.527799][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   32.533558][ T3321] Cannot create hsr debugfs directory
[   32.618019][ T3322] hsr_slave_0: entered promiscuous mode
[   32.624099][ T3322] hsr_slave_1: entered promiscuous mode
[   32.630190][ T3322] debugfs: 'hsr0' already exists in 'hsr'
[   32.635942][ T3322] Cannot create hsr debugfs directory
[   32.720679][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.739692][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.758978][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.771170][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.795742][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.806395][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.818256][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.827649][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.852982][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.862388][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.872857][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.890067][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.927857][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.940086][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.949795][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.959731][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   33.002875][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.012994][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   33.022221][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   33.032270][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   33.044449][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   33.063374][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   33.079834][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.086963][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.110922][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.118063][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.131843][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.149811][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.172186][ T3325] 8021q: adding VLAN 0 to HW filter on device team0
[   33.190607][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   33.202396][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.209502][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.221729][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.228950][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.241000][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.254611][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.261823][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.277250][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.284366][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.304591][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.356946][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.368873][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   33.393238][ T3322] 8021q: adding VLAN 0 to HW filter on device team0
[   33.408283][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.415572][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.425142][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.432229][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.448339][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.466863][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.477588][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.484747][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.498534][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.505794][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.573619][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.586538][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.597122][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.700248][ T3318] veth0_vlan: entered promiscuous mode
[   33.707436][ T3325] veth0_vlan: entered promiscuous mode
[   33.719098][ T3318] veth1_vlan: entered promiscuous mode
[   33.738538][ T3325] veth1_vlan: entered promiscuous mode
[   33.748378][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.779189][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.818058][ T3325] veth0_macvtap: entered promiscuous mode
[   33.828379][ T3317] veth0_vlan: entered promiscuous mode
[   33.838498][ T3325] veth1_macvtap: entered promiscuous mode
[   33.849449][ T3317] veth1_vlan: entered promiscuous mode
[   33.856020][ T3318] veth0_macvtap: entered promiscuous mode
[   33.870733][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.880489][ T3318] veth1_macvtap: entered promiscuous mode
[   33.893303][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.910550][ T3317] veth0_macvtap: entered promiscuous mode
[   33.921932][ T1812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.936244][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.951959][ T1812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.961809][ T1812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.973537][ T3317] veth1_macvtap: entered promiscuous mode
[   33.980151][ T1812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.991763][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.013643][ T1943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.025623][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.039487][ T1943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.057209][ T1943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.067211][ T3321] veth0_vlan: entered promiscuous mode
[   34.076141][ T3321] veth1_vlan: entered promiscuous mode
[   34.083298][ T1812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.101101][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.115329][ T3325] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   34.146692][   T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.159850][   T29] kauditd_printk_skb: 19 callbacks suppressed
[   34.159866][   T29] audit: type=1400 audit(1767972920.858:99): avc:  denied  { read write } for  pid=3325 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.190175][   T29] audit: type=1400 audit(1767972920.858:100): avc:  denied  { open } for  pid=3325 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.214240][   T29] audit: type=1400 audit(1767972920.858:101): avc:  denied  { ioctl } for  pid=3325 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.247888][   T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.256719][   T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.266215][ T3321] veth0_macvtap: entered promiscuous mode
[   34.307795][   T29] audit: type=1400 audit(1767972921.008:102): avc:  denied  { open } for  pid=3488 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   34.308627][ T3322] veth0_vlan: entered promiscuous mode
[   34.327084][   T29] audit: type=1400 audit(1767972921.008:103): avc:  denied  { perfmon } for  pid=3488 comm="syz.3.4" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   34.341159][ T3321] veth1_macvtap: entered promiscuous mode
[   34.353440][   T29] audit: type=1400 audit(1767972921.008:104): avc:  denied  { kernel } for  pid=3488 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   34.381330][   T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.393132][   T29] audit: type=1400 audit(1767972921.058:105): avc:  denied  { prog_load } for  pid=3492 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   34.402106][ T3322] veth1_vlan: entered promiscuous mode
[   34.412003][   T29] audit: type=1400 audit(1767972921.058:106): avc:  denied  { bpf } for  pid=3492 comm="syz.1.2" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   34.437593][   T29] audit: type=1400 audit(1767972921.058:107): avc:  denied  { prog_run } for  pid=3492 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   34.456331][   T29] audit: type=1400 audit(1767972921.078:108): avc:  denied  { tracepoint } for  pid=3488 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   34.473277][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.491033][ T3493] loop1: detected capacity change from 0 to 128
[   34.512120][ T3493] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   34.546052][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.558469][ T3493] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   34.570484][ T3498] loop2: detected capacity change from 0 to 256
[   34.577149][ T3498] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e'
[   34.600946][   T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.626004][   T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.642944][ T3322] veth0_macvtap: entered promiscuous mode
[   34.660587][   T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.692048][   T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.812204][ T3498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   34.824575][ T3322] veth1_macvtap: entered promiscuous mode
[   34.840924][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.861649][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.899508][   T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.953676][   T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.009256][   T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.039293][ T1943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.227570][ T3521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   35.245195][ T3519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'.
[   35.341612][ T3502] syz.1.6 (3502) used greatest stack depth: 9984 bytes left
[   35.418356][ T3529] block device autoloading is deprecated and will be removed.
[   35.721645][ T3530] syz.2.14 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   35.733113][ T3530] CPU: 1 UID: 0 PID: 3530 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.733143][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   35.733163][ T3530] Call Trace:
[   35.733175][ T3530]  <TASK>
[   35.733183][ T3530]  __dump_stack+0x1d/0x30
[   35.733287][ T3530]  dump_stack_lvl+0x95/0xd0
[   35.733308][ T3530]  dump_stack+0x15/0x1b
[   35.733330][ T3530]  dump_header+0x81/0x240
[   35.733357][ T3530]  oom_kill_process+0x295/0x350
[   35.733401][ T3530]  out_of_memory+0x97b/0xb80
[   35.733429][ T3530]  try_charge_memcg+0x610/0xa10
[   35.733574][ T3530]  charge_memcg+0x51/0xc0
[   35.733606][ T3530]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   35.733696][ T3530]  __read_swap_cache_async+0x17b/0x2d0
[   35.733731][ T3530]  swap_cluster_readahead+0x262/0x3c0
[   35.733775][ T3530]  swapin_readahead+0xde/0x820
[   35.733852][ T3530]  ? plist_check_list+0x199/0x1b0
[   35.733883][ T3530]  ? __rcu_read_unlock+0x4f/0x70
[   35.733983][ T3530]  ? swap_cache_get_folio+0x277/0x280
[   35.734067][ T3530]  do_swap_page+0x2b4/0x21e0
[   35.734101][ T3530]  ? __pfx_futex_wake_mark+0x10/0x10
[   35.734140][ T3530]  ? __pfx_default_wake_function+0x10/0x10
[   35.734242][ T3530]  handle_mm_fault+0x9d8/0x2c60
[   35.734337][ T3530]  do_user_addr_fault+0x630/0x1080
[   35.734409][ T3530]  exc_page_fault+0x62/0xa0
[   35.734443][ T3530]  asm_exc_page_fault+0x26/0x30
[   35.734466][ T3530] RIP: 0033:0x7f99518af75b
[   35.734482][ T3530] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41
[   35.734500][ T3530] RSP: 002b:00007ffc260791f8 EFLAGS: 00010213
[   35.734542][ T3530] RAX: 000000000000006e RBX: 0000000000008b1f RCX: ffffffffffffffa8
[   35.734554][ T3530] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9951b05fac
[   35.734566][ T3530] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 0000000f260794ef
[   35.734578][ T3530] R10: 00007ffc260792f0 R11: 0000000000000246 R12: 00007f9951b05fac
[   35.734598][ T3530] R13: 00007ffc260792f0 R14: 0000000000008b51 R15: 00007ffc26079310
[   35.734624][ T3530]  </TASK>
[   35.734682][ T3530] memory: usage 307200kB, limit 307200kB, failcnt 542
[   35.951245][ T3530] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0
[   35.959251][ T3530] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[   35.966869][ T3530] Memory cgroup stats for /syz2:
[   35.987550][ T3530] cache 0
[   35.995682][ T3530] rss 0
[   35.998630][ T3530] shmem 0
[   36.001597][ T3530] mapped_file 0
[   36.005113][ T3530] dirty 0
[   36.008147][ T3530] writeback 0
[   36.011452][ T3530] workingset_refault_anon 8
[   36.015963][ T3530] workingset_refault_file 25
[   36.020596][ T3530] swap 196608
[   36.023900][ T3530] swapcached 0
[   36.027305][ T3530] pgpgin 543
[   36.030551][ T3530] pgpgout 543
[   36.034006][ T3530] pgfault 251
[   36.037417][ T3530] pgmajfault 5
[   36.040799][ T3530] inactive_anon 0
[   36.044464][ T3530] active_anon 0
[   36.047954][ T3530] inactive_file 0
[   36.051675][ T3530] active_file 0
[   36.055181][ T3530] unevictable 0
[   36.058706][ T3530] hierarchical_memory_limit 314572800
[   36.064103][ T3530] hierarchical_memsw_limit 9223372036854771712
[   36.070304][ T3530] total_cache 0
[   36.073774][ T3530] total_rss 0
[   36.077071][ T3530] total_shmem 0
[   36.080595][ T3530] total_mapped_file 0
[   36.084600][ T3530] total_dirty 0
[   36.088114][ T3530] total_writeback 0
[   36.091940][ T3530] total_workingset_refault_anon 8
[   36.096984][ T3530] total_workingset_refault_file 25
[   36.102147][ T3530] total_swap 196608
[   36.105971][ T3530] total_swapcached 0
[   36.109928][ T3530] total_pgpgin 543
[   36.113673][ T3530] total_pgpgout 543
[   36.117669][ T3530] total_pgfault 251
[   36.121553][ T3530] total_pgmajfault 5
[   36.125565][ T3530] total_inactive_anon 0
[   36.129834][ T3530] total_active_anon 0
[   36.133848][ T3530] total_inactive_file 0
[   36.138061][ T3530] total_active_file 0
[   36.142113][ T3530] total_unevictable 0
[   36.146234][ T3530] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.14,pid=3530,uid=0
[   36.160756][ T3530] Memory cgroup out of memory: Killed process 3530 (syz.2.14) total-vm:95884kB, anon-rss:1264kB, file-rss:22464kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   36.177922][ T3527] syz.4.13 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   36.188934][ T3527] CPU: 0 UID: 0 PID: 3527 Comm: syz.4.13 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   36.189029][ T3527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   36.189045][ T3527] Call Trace:
[   36.189053][ T3527]  <TASK>
[   36.189062][ T3527]  __dump_stack+0x1d/0x30
[   36.189094][ T3527]  dump_stack_lvl+0x95/0xd0
[   36.189154][ T3527]  dump_stack+0x15/0x1b
[   36.189178][ T3527]  dump_header+0x81/0x240
[   36.189205][ T3527]  oom_kill_process+0x295/0x350
[   36.189296][ T3527]  out_of_memory+0x97b/0xb80
[   36.189325][ T3527]  try_charge_memcg+0x610/0xa10
[   36.189376][ T3527]  charge_memcg+0x51/0xc0
[   36.189490][ T3527]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   36.189666][ T3527]  __read_swap_cache_async+0x17b/0x2d0
[   36.189733][ T3527]  swap_cluster_readahead+0x262/0x3c0
[   36.189778][ T3527]  swapin_readahead+0xde/0x820
[   36.189811][ T3527]  ? plist_check_list+0x199/0x1b0
[   36.189896][ T3527]  ? __rcu_read_unlock+0x4f/0x70
[   36.189955][ T3527]  ? swap_cache_get_folio+0x277/0x280
[   36.189986][ T3527]  do_swap_page+0x2b4/0x21e0
[   36.190022][ T3527]  ? __pfx_futex_wake_mark+0x10/0x10
[   36.190058][ T3527]  ? __pfx_default_wake_function+0x10/0x10
[   36.190103][ T3527]  handle_mm_fault+0x9d8/0x2c60
[   36.190150][ T3527]  do_user_addr_fault+0x630/0x1080
[   36.190190][ T3527]  exc_page_fault+0x62/0xa0
[   36.190286][ T3527]  asm_exc_page_fault+0x26/0x30
[   36.190309][ T3527] RIP: 0033:0x7efc312af75b
[   36.190375][ T3527] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41
[   36.190392][ T3527] RSP: 002b:00007ffec3b1d6a8 EFLAGS: 00010213
[   36.190410][ T3527] RAX: 000000000000006e RBX: 0000000000008b1f RCX: ffffffffffffffa8
[   36.190426][ T3527] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efc3150609c
[   36.190441][ T3527] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 00000016c3b1d99f
[   36.190500][ T3527] R10: 00007ffec3b1d7a0 R11: 0000000000000246 R12: 00007efc3150609c
[   36.190512][ T3527] R13: 00007ffec3b1d7a0 R14: 0000000000008b51 R15: 00007ffec3b1d7c0
[   36.190577][ T3527]  </TASK>
[   36.190586][ T3527] memory: usage 307200kB, limit 307200kB, failcnt 506
[   36.406072][ T3527] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[   36.414068][ T3527] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[   36.421575][ T3527] Memory cgroup stats for /syz4:
[   36.458002][ T3527] cache 0
[   36.465976][ T3527] rss 0
[   36.468959][ T3527] shmem 0
[   36.471954][ T3527] mapped_file 0
[   36.475487][ T3527] dirty 0
[   36.478551][ T3527] writeback 0
[   36.481951][ T3527] workingset_refault_anon 0
[   36.486558][ T3527] workingset_refault_file 0
[   36.491144][ T3527] swap 200704
[   36.494473][ T3527] swapcached 0
[   36.497881][ T3527] pgpgin 584
[   36.501099][ T3527] pgpgout 584
[   36.504419][ T3527] pgfault 348
[   36.507765][ T3527] pgmajfault 3
[   36.511152][ T3527] inactive_anon 0
[   36.514809][ T3527] active_anon 0
[   36.518352][ T3527] inactive_file 0
[   36.522033][ T3527] active_file 0
[   36.525511][ T3527] unevictable 0
[   36.529028][ T3527] hierarchical_memory_limit 314572800
[   36.534450][ T3527] hierarchical_memsw_limit 9223372036854771712
[   36.540652][ T3527] total_cache 0
[   36.544172][ T3527] total_rss 0
[   36.547491][ T3527] total_shmem 0
[   36.550971][ T3527] total_mapped_file 0
[   36.555235][ T3527] total_dirty 0
[   36.558885][ T3527] total_writeback 0
[   36.562794][ T3527] total_workingset_refault_anon 0
[   36.567886][ T3527] total_workingset_refault_file 0
[   36.572945][ T3527] total_swap 200704
[   36.576784][ T3527] total_swapcached 0
[   36.580834][ T3527] total_pgpgin 584
[   36.584995][ T3527] total_pgpgout 584
[   36.588840][ T3527] total_pgfault 348
[   36.592768][ T3527] total_pgmajfault 3
[   36.596704][ T3527] total_inactive_anon 0
[   36.601150][ T3527] total_active_anon 0
[   36.605198][ T3527] total_inactive_file 0
[   36.609459][ T3527] total_active_file 0
[   36.613465][ T3527] total_unevictable 0
[   36.617569][ T3527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.13,pid=3527,uid=0
[   36.632120][ T3527] Memory cgroup out of memory: Killed process 3527 (syz.4.13) total-vm:95944kB, anon-rss:1260kB, file-rss:22728kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   36.729286][ T3542] loop2: detected capacity change from 0 to 512
[   36.738243][ T3534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'.
[   36.744883][ T3542] msdos: Unknown parameter 'dhTots'
[   36.767422][ T3534] 8021q: VLANs not supported on ip6gre0
[   36.835579][ T3528] syz.4.13 (3528) used greatest stack depth: 9016 bytes left
[   36.927270][ T3550] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0
[   36.940744][ T3548] IPVS: stopping backup sync thread 3550 ...
[   36.978273][ T3548] netlink: 'syz.1.19': attribute type 10 has an invalid length.
[   36.985987][ T3548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19'.
[   37.090311][ T3548] dummy0: entered promiscuous mode
[   37.108287][ T3548] bridge0: port 3(dummy0) entered blocking state
[   37.114720][ T3548] bridge0: port 3(dummy0) entered disabled state
[   37.142923][ T3560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'.
[   37.152518][ T3561] netlink: 'syz.1.19': attribute type 10 has an invalid length.
[   37.161331][ T3548] dummy0: entered allmulticast mode
[   37.177685][ T3548] bridge0: port 3(dummy0) entered blocking state
[   37.184252][ T3548] bridge0: port 3(dummy0) entered forwarding state
[   37.210603][ T3562] loop1: detected capacity change from 0 to 512
[   37.242347][ T3561] bridge0: port 3(dummy0) entered disabled state
[   37.262104][ T3562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.275349][ T3562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.307748][ T3561] dummy0: left allmulticast mode
[   37.316460][ T3562] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal
[   37.366038][ T3561] dummy0: left promiscuous mode
[   37.371487][ T3561] bridge0: port 3(dummy0) entered disabled state
[   37.395890][ T3566] loop4: detected capacity change from 0 to 128
[   37.432610][ T3561] team0: Port device dummy0 added
[   37.492367][ T3571] loop4: detected capacity change from 0 to 256
[   37.499472][ T3571] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e'
[   37.710167][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'.
[   37.757429][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   37.766292][ T3579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'.
[   37.820673][ T3579] Zero length message leads to an empty skb
[   38.525642][ T3635] loop4: detected capacity change from 0 to 1024
[   38.533037][ T3635] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   38.547121][ T3635] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   38.555686][ T3635] EXT4-fs (loop4): orphan cleanup on readonly fs
[   38.577548][ T3635] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.34: Freeing blocks not in datazone - block = 0, count = 4096
[   38.591302][ T3635] EXT4-fs (loop4): 1 orphan inode deleted
[   38.598114][ T3635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   38.665037][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.778317][ T3656] netlink: 'syz.0.37': attribute type 10 has an invalid length.
[   38.865760][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   38.881802][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   38.906317][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   38.913978][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   38.923754][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   38.948384][ T3666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'.
[   38.957610][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   38.964746][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   38.985402][ T3668] loop4: detected capacity change from 0 to 128
[   39.015201][ T3676] loop1: detected capacity change from 0 to 128
[   39.046118][ T3680] 9p: Bad value for 'wfdno'
[   39.061434][ T3676] tipc: Started in network mode
[   39.066368][ T3676] tipc: Node identity 4, cluster identity 4711
[   39.072657][ T3676] tipc: Node number set to 4
[   39.096149][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.096193][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.125152][ T3676] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET)
[   39.144618][ T3690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.155893][ T3688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.42'.
[   39.163736][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.164803][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.172902][   T29] kauditd_printk_skb: 397 callbacks suppressed
[   39.172918][   T29] audit: type=1326 audit(1767972925.868:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.194433][ T3690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.238455][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.238552][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.268843][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.276842][   T29] audit: type=1326 audit(1767972925.868:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.307811][   T29] audit: type=1326 audit(1767972925.868:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.331664][   T29] audit: type=1326 audit(1767972925.868:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.355559][   T29] audit: type=1326 audit(1767972925.918:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.378819][   T29] audit: type=1326 audit(1767972925.918:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.402238][   T29] audit: type=1326 audit(1767972925.918:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.426406][   T29] audit: type=1326 audit(1767972925.918:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.449852][   T29] audit: type=1326 audit(1767972925.918:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.473065][   T29] audit: type=1326 audit(1767972925.918:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb68f749 code=0x7ffc0000
[   39.525947][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.525982][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.540021][ T3690] bond1: entered promiscuous mode
[   39.613425][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.614125][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.632832][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.649756][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.658898][ T3699] loop1: detected capacity change from 0 to 256
[   39.664590][ T3661] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   39.680180][ T3699] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e'
[   39.922406][ T3699] __nla_validate_parse: 1 callbacks suppressed
[   39.922420][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'.
[   39.981516][ T3720] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[   40.018141][ T3720] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[   40.030675][ T3722] loop0: detected capacity change from 0 to 512
[   40.047755][ T3722] EXT4-fs: Ignoring removed i_version option
[   40.057913][ T3722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.111545][ T3727] loop3: detected capacity change from 0 to 512
[   40.121706][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.175288][ T3727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   40.309602][ T3727] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   40.341263][ T3727] EXT4-fs (loop3): 1 truncate cleaned up
[   40.348612][ T3727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.443735][ T3748] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   40.450322][ T3748] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   40.458102][ T3748] vhci_hcd vhci_hcd.0: Device attached
[   40.464329][ T3746] EXT4-fs error (device loop3): ext4_xattr_block_find:1878: inode #15: comm syz.3.51: corrupted xattr block 33: invalid header
[   40.483116][ T3749] vhci_hcd: connection closed
[   40.483355][ T1943] vhci_hcd vhci_hcd.2: stop threads
[   40.493495][ T1943] vhci_hcd vhci_hcd.2: release socket
[   40.498933][ T1943] vhci_hcd vhci_hcd.2: disconnect device
[   40.530521][ T3543] syz.3.16 (3543) used greatest stack depth: 8080 bytes left
[   40.542643][ T3746] EXT4-fs (loop3): Remounting filesystem read-only
[   40.577592][ T3746] process 'syz.3.51' launched '/dev/fd/16' with NULL argv: empty string added
[   40.826805][ T3763] loop4: detected capacity change from 0 to 128
[   40.836667][ T3763] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   40.855354][ T3763] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   40.863186][ T3758] syz.1.62 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   40.875310][ T3758] CPU: 1 UID: 0 PID: 3758 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.875351][ T3758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   40.875367][ T3758] Call Trace:
[   40.875374][ T3758]  <TASK>
[   40.875384][ T3758]  __dump_stack+0x1d/0x30
[   40.875424][ T3758]  dump_stack_lvl+0x95/0xd0
[   40.875476][ T3758]  dump_stack+0x15/0x1b
[   40.875552][ T3758]  dump_header+0x81/0x240
[   40.875623][ T3758]  oom_kill_process+0x295/0x350
[   40.875651][ T3758]  out_of_memory+0x97b/0xb80
[   40.875680][ T3758]  try_charge_memcg+0x610/0xa10
[   40.875790][ T3758]  charge_memcg+0x51/0xc0
[   40.875829][ T3758]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   40.875868][ T3758]  __read_swap_cache_async+0x17b/0x2d0
[   40.875919][ T3758]  swap_cluster_readahead+0x262/0x3c0
[   40.875960][ T3758]  swapin_readahead+0xde/0x820
[   40.875994][ T3758]  ? from_kuid+0x139/0x320
[   40.876066][ T3758]  ? __rcu_read_unlock+0x4f/0x70
[   40.876087][ T3758]  ? __perf_event_task_sched_in+0xa5b/0xac0
[   40.876115][ T3758]  ? __rcu_read_unlock+0x4f/0x70
[   40.876137][ T3758]  ? __rcu_read_unlock+0x4f/0x70
[   40.876156][ T3758]  ? swap_cache_get_folio+0x277/0x280
[   40.876215][ T3758]  do_swap_page+0x2b4/0x21e0
[   40.876250][ T3758]  ? _raw_spin_unlock+0x26/0x50
[   40.876279][ T3758]  ? __schedule+0x85f/0xcd0
[   40.876372][ T3758]  ? __pfx_default_wake_function+0x10/0x10
[   40.876417][ T3758]  handle_mm_fault+0x9d8/0x2c60
[   40.876534][ T3758]  do_user_addr_fault+0x630/0x1080
[   40.876568][ T3758]  exc_page_fault+0x62/0xa0
[   40.876597][ T3758]  asm_exc_page_fault+0x26/0x30
[   40.876618][ T3758] RIP: 0033:0x7f2c523e59ec
[   40.876686][ T3758] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   40.876706][ T3758] RSP: 002b:00007ffef8de28c0 EFLAGS: 00010206
[   40.876727][ T3758] RAX: 0000000000000000 RBX: 00007f2c52765fa0 RCX: 0000000000000000
[   40.876741][ T3758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555ec8b808
[   40.876753][ T3758] RBP: 00007f2c52767da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   40.876766][ T3758] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000a201
[   40.876778][ T3758] R13: 00007f2c52766090 R14: ffffffffffffffff R15: 00007ffef8de29d0
[   40.876799][ T3758]  </TASK>
[   40.876808][ T3758] memory: usage 307200kB, limit 307200kB, failcnt 797
[   41.113310][ T3758] memory+swap: usage 189328kB, limit 9007199254740988kB, failcnt 0
[   41.121264][ T3758] kmem: usage 185972kB, limit 9007199254740988kB, failcnt 0
[   41.128636][ T3758] Memory cgroup stats for /syz1:
[   41.129077][ T3758] cache 524288
[   41.137539][ T3758] rss 20480
[   41.140680][ T3758] shmem 0
[   41.143725][ T3758] mapped_file 65536
[   41.147598][ T3758] dirty 0
[   41.150561][ T3758] writeback 0
[   41.153881][ T3758] workingset_refault_anon 67
[   41.158562][ T3758] workingset_refault_file 146
[   41.163263][ T3758] swap 180224
[   41.166675][ T3758] swapcached 16384
[   41.170454][ T3758] pgpgin 1347
[   41.173760][ T3758] pgpgout 1213
[   41.177220][ T3758] pgfault 1406
[   41.180620][ T3758] pgmajfault 55
[   41.184099][ T3758] inactive_anon 0
[   41.187804][ T3758] active_anon 16384
[   41.191689][ T3758] inactive_file 0
[   41.195348][ T3758] active_file 503808
[   41.199313][ T3758] unevictable 0
[   41.202884][ T3758] hierarchical_memory_limit 314572800
[   41.208408][ T3758] hierarchical_memsw_limit 9223372036854771712
[   41.214587][ T3758] total_cache 524288
[   41.218545][ T3758] total_rss 20480
[   41.222329][ T3758] total_shmem 0
[   41.225822][ T3758] total_mapped_file 65536
[   41.230271][ T3758] total_dirty 0
[   41.233753][ T3758] total_writeback 0
[   41.237626][ T3758] total_workingset_refault_anon 67
[   41.242848][ T3758] total_workingset_refault_file 146
[   41.248103][ T3758] total_swap 180224
[   41.251929][ T3758] total_swapcached 16384
[   41.256247][ T3758] total_pgpgin 1347
[   41.260191][ T3758] total_pgpgout 1213
[   41.264103][ T3758] total_pgfault 1406
[   41.268043][ T3758] total_pgmajfault 55
[   41.272036][ T3758] total_inactive_anon 0
[   41.276201][ T3758] total_active_anon 16384
[   41.280593][ T3758] total_inactive_file 0
[   41.284787][ T3758] total_active_file 503808
[   41.289249][ T3758] total_unevictable 0
[   41.293264][ T3758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.62,pid=3758,uid=0
[   41.308092][ T3758] Memory cgroup out of memory: Killed process 3758 (syz.1.62) total-vm:96016kB, anon-rss:1264kB, file-rss:22740kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   41.341479][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.419512][ T3770] netlink: 'syz.2.67': attribute type 1 has an invalid length.
[   41.438223][ T3766] loop4: detected capacity change from 0 to 8192
[   41.458498][ T3773] netlink: 'syz.0.69': attribute type 7 has an invalid length.
[   41.466185][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   41.483196][ T3766] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   41.517291][ T3777] netlink: 'syz.3.70': attribute type 3 has an invalid length.
[   41.550378][ T3777] netlink: 'syz.3.70': attribute type 3 has an invalid length.
[   41.590860][ T3789] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[   41.599497][ T3789] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[   41.633462][ T3792] loop4: detected capacity change from 0 to 128
[   41.648648][ T3792] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   41.667748][ T3792] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   41.687747][ T3795] loop1: detected capacity change from 0 to 1764
[   41.708871][ T3795] =======================================================
[   41.708871][ T3795] WARNING: The mand mount option has been deprecated and
[   41.708871][ T3795]          and is ignored by this kernel. Remove the mand
[   41.708871][ T3795]          option from the mount to silence this warning.
[   41.708871][ T3795] =======================================================
[   41.777278][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'.
[   41.976118][ T3809] sd 0:0:1:0: device reset
[   42.019729][ T3807] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[   42.028271][ T3807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45337 sclass=netlink_route_socket pid=3807 comm=syz.1.81
[   42.095796][ T3810] loop1: detected capacity change from 0 to 128
[   42.344521][ T3825] loop3: detected capacity change from 0 to 512
[   42.381272][ T3825] ------------[ cut here ]------------
[   42.386789][ T3825] EA inode 11 i_nlink=2
[   42.386807][ T3825] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.3.85/3825
[   42.401836][ T3825] Modules linked in:
[   42.405809][ T3825] CPU: 0 UID: 0 PID: 3825 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   42.415553][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   42.425732][ T3825] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320
[   42.432622][ T3825] Code: 61 e1 9c ff 4c 8d 2d fa ec 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c 8b ba 03 66 66 66 2e 0f 1f 84
[   42.452312][ T3825] RSP: 0018:ffffc90000e3b5a0 EFLAGS: 00010246
[   42.458505][ T3825] RAX: ffff88810456dd10 RBX: ffff88810798b688 RCX: ffffffff81bb1ecb
[   42.466514][ T3825] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0
[   42.474612][ T3825] RBP: 000000000000000b R08: 000188810798b63b R09: 0000000000000000
[   42.482741][ T3825] R10: ffffc90000e3b4d0 R11: 0001c90000e3b4d0 R12: ffff88810798b638
[   42.490781][ T3825] R13: ffffffff86dc0bb0 R14: ffff88810798b5f0 R15: 0000000000000001
[   42.498869][ T3825] FS:  00007fe3e9d946c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000
[   42.507864][ T3825] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.514488][ T3825] CR2: 00007fc1644a36c8 CR3: 00000001278f2000 CR4: 00000000003506f0
[   42.522622][ T3825] Call Trace:
[   42.525932][ T3825]  <TASK>
[   42.529002][ T3825]  ext4_xattr_set_entry+0x77f/0x1020
[   42.534359][ T3825]  ext4_xattr_ibody_set+0x184/0x3c0
[   42.539747][ T3825]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[   42.545841][ T3825]  __ext4_expand_extra_isize+0x246/0x280
[   42.551648][ T3825]  __ext4_mark_inode_dirty+0x29d/0x3f0
[   42.557234][ T3825]  ext4_evict_inode+0x7c4/0xd40
[   42.562259][ T3825]  ? __pfx_ext4_evict_inode+0x10/0x10
[   42.567860][ T3825]  evict+0x2af/0x510
[   42.571975][ T3825]  ? __dquot_initialize+0x146/0x7c0
[   42.577336][ T3825]  iput+0x4bd/0x650
[   42.581188][ T3825]  ext4_process_orphan+0x1a9/0x1c0
[   42.586354][ T3825]  ext4_orphan_cleanup+0x6a8/0xa00
[   42.591670][ T3825]  ext4_fill_super+0x3411/0x37a0
[   42.596670][ T3825]  ? set_blocksize+0x1a8/0x310
[   42.601565][ T3825]  ? sb_set_blocksize+0xfc/0x170
[   42.606674][ T3825]  ? setup_bdev_super+0x30e/0x370
[   42.611876][ T3825]  ? __pfx_ext4_fill_super+0x10/0x10
[   42.617370][ T3825]  get_tree_bdev_flags+0x291/0x300
[   42.622584][ T3825]  ? __pfx_ext4_fill_super+0x10/0x10
[   42.627961][ T3825]  get_tree_bdev+0x1f/0x30
[   42.632412][ T3825]  ext4_get_tree+0x1c/0x30
[   42.636930][ T3825]  vfs_get_tree+0x57/0x1d0
[   42.641422][ T3825]  do_new_mount+0x24d/0x6a0
[   42.645976][ T3825]  path_mount+0x4ab/0xb80
[   42.650411][ T3825]  ? user_path_at+0xbf/0x130
[   42.655178][ T3825]  __se_sys_mount+0x28c/0x2e0
[   42.660000][ T3825]  __x64_sys_mount+0x67/0x80
[   42.664672][ T3825]  x64_sys_call+0x2cca/0x3000
[   42.669632][ T3825]  do_syscall_64+0xca/0x2b0
[   42.674217][ T3825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.680231][ T3825] RIP: 0033:0x7fe3eb690eea
[   42.684691][ T3825] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.704425][ T3825] RSP: 002b:00007fe3e9d93e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   42.712918][ T3825] RAX: ffffffffffffffda RBX: 00007fe3e9d93ef0 RCX: 00007fe3eb690eea
[   42.721008][ T3825] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe3e9d93eb0
[   42.729052][ T3825] RBP: 0000200000000180 R08: 00007fe3e9d93ef0 R09: 0000000000800700
[   42.737152][ T3825] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[   42.745292][ T3825] R13: 00007fe3e9d93eb0 R14: 000000000000046f R15: 000000000000002c
[   42.753919][ T3825]  </TASK>
[   42.757000][ T3825] ---[ end trace 0000000000000000 ]---
[   42.815883][ T3825] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.85: iget: bad extra_isize 90 (inode size 256)
[   42.829540][ T3825] EXT4-fs (loop3): Remounting filesystem read-only
[   42.836180][ T3825] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[   42.854757][ T3825] EXT4-fs (loop3): 1 orphan inode deleted
[   42.861078][ T3825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.901832][ T3829] netlink: 830 bytes leftover after parsing attributes in process `syz.4.87'.
[   42.929925][ T3825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.004310][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'.
[   43.037960][ T3840] block device autoloading is deprecated and will be removed.
[   43.054617][ T3848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'.
[   43.080208][ T3840] loop0: detected capacity change from 0 to 128
[   43.097669][ T3840] /dev/loop0: Can't open blockdev
[   43.138619][ T3853] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   43.165846][ T3853] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   43.199775][   T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   43.207497][ T3857] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[   43.215610][ T3855] EXT4-fs: dax option not supported
[   43.225067][   T23] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   43.252518][ T3857] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[   43.321882][ T3860] fido_id[3860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   43.548361][ T3876] netlink: 'syz.3.102': attribute type 1 has an invalid length.
[   43.814075][ T3862] syz.0.97 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   43.824975][ T3862] CPU: 0 UID: 0 PID: 3862 Comm: syz.0.97 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   43.825149][ T3862] Tainted: [W]=WARN
[   43.825228][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   43.825244][ T3862] Call Trace:
[   43.825253][ T3862]  <TASK>
[   43.825263][ T3862]  __dump_stack+0x1d/0x30
[   43.825365][ T3862]  dump_stack_lvl+0x95/0xd0
[   43.825391][ T3862]  dump_stack+0x15/0x1b
[   43.825417][ T3862]  dump_header+0x81/0x240
[   43.825443][ T3862]  oom_kill_process+0x295/0x350
[   43.825541][ T3862]  out_of_memory+0x97b/0xb80
[   43.825564][ T3862]  try_charge_memcg+0x610/0xa10
[   43.825612][ T3862]  charge_memcg+0x51/0xc0
[   43.825703][ T3862]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   43.825747][ T3862]  __read_swap_cache_async+0x17b/0x2d0
[   43.825818][ T3862]  swap_cluster_readahead+0x262/0x3c0
[   43.825853][ T3862]  swapin_readahead+0xde/0x820
[   43.825899][ T3862]  ? mod_memcg_lruvec_state+0x1a1/0x280
[   43.825935][ T3862]  ? lruvec_stat_mod_folio+0xd6/0x120
[   43.825966][ T3862]  ? __rcu_read_unlock+0x4f/0x70
[   43.825993][ T3862]  ? swap_cache_get_folio+0x277/0x280
[   43.826108][ T3862]  do_swap_page+0x2b4/0x21e0
[   43.826148][ T3862]  ? sysvec_apic_timer_interrupt+0x44/0x80
[   43.826181][ T3862]  ? __pfx_default_wake_function+0x10/0x10
[   43.826266][ T3862]  handle_mm_fault+0x9d8/0x2c60
[   43.826445][ T3862]  do_user_addr_fault+0x630/0x1080
[   43.826481][ T3862]  exc_page_fault+0x62/0xa0
[   43.826535][ T3862]  asm_exc_page_fault+0x26/0x30
[   43.826608][ T3862] RIP: 0033:0x7f18c8b959c8
[   43.826624][ T3862] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 23 38 00 00 0f 8e 09 fe ff ff e8 23 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00
[   43.826690][ T3862] RSP: 002b:00007fffcea68e00 EFLAGS: 00010206
[   43.826762][ T3862] RAX: 000000000000aa90 RBX: 00007f18c8f17da0 RCX: 000000000000a7f8
[   43.826836][ T3862] RDX: 0000000000000298 RSI: 00007fffcea68de0 RDI: 0000000000000001
[   43.826848][ T3862] RBP: 00007f18c8f17da0 R08: 0000000027942c9e R09: 7fffffffffffffff
[   43.826860][ T3862] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000000ac4b
[   43.826872][ T3862] R13: 00007f18c8f16090 R14: ffffffffffffffff R15: 00007fffcea68f10
[   43.826891][ T3862]  </TASK>
[   43.826897][ T3862] memory: usage 307200kB, limit 307200kB, failcnt 708
[   44.054701][ T3862] memory+swap: usage 241060kB, limit 9007199254740988kB, failcnt 0
[   44.062689][ T3862] kmem: usage 240160kB, limit 9007199254740988kB, failcnt 0
[   44.070111][ T3862] Memory cgroup stats for /syz0:
[   44.307466][ T3889] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[   44.327654][ T3862] cache 524288
[   44.331078][ T3862] rss 12288
[   44.334208][ T3862] shmem 0
[   44.337241][ T3862] mapped_file 65536
[   44.341179][ T3862] dirty 0
[   44.344149][ T3862] writeback 12288
[   44.347881][ T3862] workingset_refault_anon 11
[   44.352530][ T3862] workingset_refault_file 142
[   44.357444][ T3862] swap 167936
[   44.360768][ T3862] swapcached 36864
[   44.364512][ T3862] pgpgin 8815
[   44.367859][ T3862] pgpgout 8677
[   44.371264][ T3862] pgfault 9463
[   44.374658][ T3862] pgmajfault 10
[   44.378169][ T3862] inactive_anon 28672
[   44.382177][ T3862] active_anon 12288
[   44.386004][ T3862] inactive_file 0
[   44.389737][ T3862] active_file 524288
[   44.393656][ T3862] unevictable 0
[   44.397210][ T3862] hierarchical_memory_limit 314572800
[   44.399406][ T3889] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[   44.402629][ T3862] hierarchical_memsw_limit 9223372036854771712
[   44.416365][ T3862] total_cache 524288
[   44.420399][ T3862] total_rss 12288
[   44.424061][ T3862] total_shmem 0
[   44.427698][ T3862] total_mapped_file 65536
[   44.432042][ T3862] total_dirty 0
[   44.435527][ T3862] total_writeback 12288
[   44.439817][ T3862] total_workingset_refault_anon 11
[   44.444952][ T3862] total_workingset_refault_file 142
[   44.450272][ T3862] total_swap 167936
[   44.454130][ T3862] total_swapcached 36864
[   44.458551][ T3862] total_pgpgin 8815
[   44.462385][ T3862] total_pgpgout 8677
[   44.466350][ T3862] total_pgfault 9463
[   44.470350][ T3862] total_pgmajfault 10
[   44.474420][ T3862] total_inactive_anon 28672
[   44.478965][ T3862] total_active_anon 12288
[   44.483311][ T3862] total_inactive_file 0
[   44.487515][ T3862] total_active_file 524288
[   44.491995][ T3862] total_unevictable 0
[   44.496004][ T3862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.97,pid=3862,uid=0
[   44.510528][ T3862] Memory cgroup out of memory: Killed process 3862 (syz.0.97) total-vm:96016kB, anon-rss:1264kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[   44.566241][   T29] kauditd_printk_skb: 791 callbacks suppressed
[   44.566257][   T29] audit: type=1400 audit(1767972931.258:1307): avc:  denied  { read write } for  pid=3894 comm="syz.2.109" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   44.597271][   T29] audit: type=1400 audit(1767972931.258:1308): avc:  denied  { open } for  pid=3894 comm="syz.2.109" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   44.656724][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   44.687397][   T29] audit: type=1400 audit(1767972931.338:1309): avc:  denied  { write } for  pid=3902 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   44.708010][   T29] audit: type=1400 audit(1767972931.408:1310): avc:  denied  { add_name } for  pid=3892 comm="syz.3.106" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   44.729835][   T29] audit: type=1400 audit(1767972931.408:1311): avc:  denied  { create } for  pid=3892 comm="syz.3.106" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.751645][   T29] audit: type=1400 audit(1767972931.418:1312): avc:  denied  { read append open } for  pid=3892 comm="syz.3.106" path="/28/file2/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.784704][ T3906] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.106: corrupted in-inode xattr: e_value size too large
[   44.820008][ T3905] set_capacity_and_notify: 4 callbacks suppressed
[   44.820024][ T3905] loop4: detected capacity change from 0 to 512
[   44.823709][ T3893] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   44.837673][ T3905] journal_path: Non-blockdev passed as './bus'
[   44.854231][ T3905] EXT4-fs: error: could not find journal device path
[   44.862168][   T29] audit: type=1400 audit(1767972931.478:1313): avc:  denied  { map } for  pid=3892 comm="syz.3.106" path="/28/file2/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.867736][ T3893] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 426 with error 28
[   44.885702][   T29] audit: type=1400 audit(1767972931.478:1314): avc:  denied  { write } for  pid=3892 comm="syz.3.106" path="/28/file2/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.898045][ T3893] EXT4-fs (loop3): This should not happen!! Data will be lost
[   44.898045][ T3893] 
[   44.898065][ T3893] EXT4-fs (loop3): Total free blocks count 0
[   44.898078][ T3893] EXT4-fs (loop3): Free/Dirty block details
[   44.898090][ T3893] EXT4-fs (loop3): free_blocks=2415919104
[   44.948806][ T3893] EXT4-fs (loop3): dirty_blocks=432
[   44.954021][ T3893] EXT4-fs (loop3): Block reservation details
[   44.960238][ T3893] EXT4-fs (loop3): i_reserved_data_blocks=27
[   44.978651][ T3906] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.106: corrupted in-inode xattr: e_value size too large
[   45.002723][ T3893] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.106: corrupted in-inode xattr: e_value size too large
[   45.017836][ T3893] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 426 with max blocks 1 with error 28
[   45.035218][   T29] audit: type=1400 audit(1767972931.718:1315): avc:  denied  { ioctl } for  pid=3892 comm="syz.3.106" path="/28/file2/memory.stat" dev="loop3" ino=18 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   45.075757][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'.
[   45.085112][ T3906] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.106: corrupted in-inode xattr: e_value size too large
[   45.093053][ T3911] loop0: detected capacity change from 0 to 512
[   45.112618][   T29] audit: type=1400 audit(1767972931.808:1316): avc:  denied  { shutdown } for  pid=3908 comm="syz.2.113" lport=40735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   45.145693][ T3911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.214042][ T3917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.116'.
[   45.243979][ T3911] netlink: 256 bytes leftover after parsing attributes in process `syz.0.112'.
[   45.289097][ T3911] mmap: syz.0.112 (3911) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   45.368348][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.542242][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.2.121
[   46.127027][ T3956] loop4: detected capacity change from 0 to 128
[   46.142619][ T3956] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   46.160051][ T3956] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   46.239032][ T3959] loop1: detected capacity change from 0 to 128
[   46.249394][ T3959] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   46.249819][ T3959] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   46.332364][ T3970] loop2: detected capacity change from 0 to 512
[   46.333192][ T3970] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   46.343092][ T3970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[   46.343383][ T3970] EXT4-fs (loop2): orphan cleanup on readonly fs
[   46.343453][ T3970] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.134: bad orphan inode 267
[   46.343674][ T3970] EXT4-fs (loop2): Remounting filesystem read-only
[   46.344125][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   46.367911][ T3970] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.134: dx entry: limit 0 != root limit 125
[   46.367948][ T3970] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.134: Corrupt directory, running e2fsck is recommended
[   46.408960][ T3970] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.134: dx entry: limit 0 != root limit 125
[   46.408998][ T3970] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.134: Corrupt directory, running e2fsck is recommended
[   46.418193][ T3970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   46.447867][ T3977] loop3: detected capacity change from 0 to 512
[   46.489303][ T3977] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   46.536284][ T3977] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.137: invalid block
[   46.559358][ T3977] EXT4-fs (loop3): Remounting filesystem read-only
[   46.602033][ T3977] EXT4-fs (loop3): 1 truncate cleaned up
[   46.620162][ T3984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'.
[   46.620468][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.690449][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.697128][ T3988] block device autoloading is deprecated and will be removed.
[   46.752433][ T3988] loop0: detected capacity change from 0 to 128
[   46.770517][ T3988] /dev/loop0: Can't open blockdev
[   46.951501][ T3998] loop0: detected capacity change from 0 to 128
[   46.980024][ T3998] FAULT_INJECTION: forcing a failure.
[   46.980024][ T3998] name failslab, interval 1, probability 0, space 0, times 1
[   46.992737][ T3998] CPU: 1 UID: 0 PID: 3998 Comm: syz.0.145 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   46.992836][ T3998] Tainted: [W]=WARN
[   46.992842][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.992857][ T3998] Call Trace:
[   46.992867][ T3998]  <TASK>
[   46.992877][ T3998]  __dump_stack+0x1d/0x30
[   46.992910][ T3998]  dump_stack_lvl+0x95/0xd0
[   46.993022][ T3998]  dump_stack+0x15/0x1b
[   46.993049][ T3998]  should_fail_ex+0x265/0x280
[   46.993081][ T3998]  should_failslab+0x8c/0xb0
[   46.993111][ T3998]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[   46.993182][ T3998]  ? __d_alloc+0x37/0x340
[   46.993218][ T3998]  __d_alloc+0x37/0x340
[   46.993249][ T3998]  ? selinux_inode_permission+0x6be/0x7c0
[   46.993291][ T3998]  d_alloc_parallel+0x54/0xcd0
[   46.993397][ T3998]  ? __d_lookup_rcu_op_compare+0x23b/0x270
[   46.993499][ T3998]  ? security_inode_permission+0x4a/0xb0
[   46.993533][ T3998]  ? lockref_get_not_dead+0x120/0x1c0
[   46.993659][ T3998]  ? __rcu_read_unlock+0x4f/0x70
[   46.993758][ T3998]  __lookup_slow+0x8c/0x250
[   46.993798][ T3998]  lookup_slow+0x3c/0x60
[   46.993836][ T3998]  path_lookupat+0x2f7/0x500
[   46.993870][ T3998]  ? kernelmode_fixup_or_oops+0x59/0xb0
[   46.994011][ T3998]  filename_lookup+0x147/0x340
[   46.994061][ T3998]  filename_getxattr+0x54/0x180
[   46.994092][ T3998]  __x64_sys_lgetxattr+0x10f/0x140
[   46.994207][ T3998]  x64_sys_call+0x27a2/0x3000
[   46.994239][ T3998]  do_syscall_64+0xca/0x2b0
[   46.994283][ T3998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.994366][ T3998] RIP: 0033:0x7f18c8cbf749
[   46.994387][ T3998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.994411][ T3998] RSP: 002b:00007f18c771f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[   46.994480][ T3998] RAX: ffffffffffffffda RBX: 00007f18c8f15fa0 RCX: 00007f18c8cbf749
[   46.994497][ T3998] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000
[   46.994515][ T3998] RBP: 00007f18c771f090 R08: 0000000000000000 R09: 0000000000000000
[   46.994532][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.994548][ T3998] R13: 00007f18c8f16038 R14: 00007f18c8f15fa0 R15: 00007fffcea68c98
[   46.994574][ T3998]  </TASK>
[   47.272372][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   47.413170][ T4007] loop0: detected capacity change from 0 to 1024
[   47.422820][ T4007] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.433392][ T4007] ext4: Bad value for 'resgid'
[   47.438274][ T4007] ext4: Bad value for 'resgid'
[   47.811646][ T4023] loop3: detected capacity change from 0 to 2048
[   47.886426][ T4023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.013288][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.169700][ T4027] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   48.187767][ T4027] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   48.432512][ T4038] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e'
[   48.526468][ T4042] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   48.583424][ T4042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'.
[   48.651170][ T4038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'.
[   48.806212][ T4050] netlink: 'syz.4.164': attribute type 4 has an invalid length.
[   48.859463][ T4053] netlink: 'syz.4.164': attribute type 4 has an invalid length.
[   49.011118][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.018978][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.026779][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.034699][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.042549][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.050446][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.058273][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.066063][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.073872][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   49.083465][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   50.055560][ T3398] hid-generic 0000:0000:FFFFFFFC.0002: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[   50.079933][ T4061] FAULT_INJECTION: forcing a failure.
[   50.079933][ T4061] name failslab, interval 1, probability 0, space 0, times 0
[   50.092802][ T4061] CPU: 0 UID: 0 PID: 4061 Comm: syz.4.167 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   50.092839][ T4061] Tainted: [W]=WARN
[   50.092866][ T4061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   50.092880][ T4061] Call Trace:
[   50.092938][ T4061]  <TASK>
[   50.092947][ T4061]  __dump_stack+0x1d/0x30
[   50.092972][ T4061]  dump_stack_lvl+0x95/0xd0
[   50.092993][ T4061]  dump_stack+0x15/0x1b
[   50.093012][ T4061]  should_fail_ex+0x265/0x280
[   50.093057][ T4061]  should_failslab+0x8c/0xb0
[   50.093084][ T4061]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[   50.093173][ T4061]  ? __d_alloc+0x37/0x340
[   50.093206][ T4061]  __d_alloc+0x37/0x340
[   50.093231][ T4061]  ? mpol_shared_policy_init+0xbd/0x4c0
[   50.093273][ T4061]  d_alloc_pseudo+0x1e/0x80
[   50.093361][ T4061]  alloc_file_pseudo+0x71/0x160
[   50.093391][ T4061]  __shmem_file_setup+0x1de/0x210
[   50.093466][ T4061]  shmem_file_setup+0x3b/0x50
[   50.093489][ T4061]  __se_sys_memfd_create+0x2f7/0x6b0
[   50.093572][ T4061]  __x64_sys_memfd_create+0x31/0x40
[   50.093613][ T4061]  x64_sys_call+0x28cb/0x3000
[   50.093653][ T4061]  do_syscall_64+0xca/0x2b0
[   50.093763][ T4061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.093785][ T4061] RIP: 0033:0x7efc312af749
[   50.093801][ T4061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.093819][ T4061] RSP: 002b:00007efc2fd16e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   50.093839][ T4061] RAX: ffffffffffffffda RBX: 00000000000007b8 RCX: 00007efc312af749
[   50.093851][ T4061] RDX: 00007efc2fd16ef0 RSI: 0000000000000000 RDI: 00007efc31334960
[   50.093901][ T4061] RBP: 0000200000000980 R08: 00007efc2fd16bb7 R09: 00007efc2fd16e40
[   50.093913][ T4061] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100
[   50.093925][ T4061] R13: 00007efc2fd16ef0 R14: 00007efc2fd16eb0 R15: 0000200000001c80
[   50.093944][ T4061]  </TASK>
[   50.322878][ T4064] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[   50.332168][   T29] kauditd_printk_skb: 628 callbacks suppressed
[   50.332186][   T29] audit: type=1326 audit(1767972937.028:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.382387][ T4064] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[   50.398992][   T29] audit: type=1326 audit(1767972937.058:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.422627][   T29] audit: type=1326 audit(1767972937.058:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.446112][   T29] audit: type=1326 audit(1767972937.058:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.469600][   T29] audit: type=1326 audit(1767972937.058:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.493311][   T29] audit: type=1326 audit(1767972937.058:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.517363][   T29] audit: type=1326 audit(1767972937.058:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.541027][   T29] audit: type=1326 audit(1767972937.058:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.564806][   T29] audit: type=1326 audit(1767972937.058:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.588349][   T29] audit: type=1326 audit(1767972937.058:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2c5250f749 code=0x7ffc0000
[   50.640959][ T4078] set_capacity_and_notify: 3 callbacks suppressed
[   50.640974][ T4078] loop3: detected capacity change from 0 to 128
[   50.714743][ T4083] loop4: detected capacity change from 0 to 256
[   50.715001][ T4083] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e'
[   50.903944][ T4094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.180'.
[   50.918700][ T4083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'.
[   50.929956][ T4094] netlink: 3 bytes leftover after parsing attributes in process `syz.2.180'.
[   50.930110][ T4094] 0ªX¹¦À: renamed from caif0
[   50.951455][ T4094] 0ªX¹¦À: entered allmulticast mode
[   50.951473][ T4094] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   51.488167][ T4100] tipc: Started in network mode
[   51.488202][ T4100] tipc: Node identity ac14140f, cluster identity 4711
[   51.488759][ T4100] tipc: New replicast peer: 255.255.255.255
[   51.489034][ T4100] tipc: Enabled bearer <udp:syz2>, priority 10
[   51.603319][ T4104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.184'.
[   51.617081][ T4102] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[   51.617698][ T4102] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[   51.674396][ T4106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.185'.
[   51.690039][ T4113] netlink: 'syz.3.187': attribute type 6 has an invalid length.
[   51.714623][ T4108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'.
[   51.714627][ T4110] loop2: detected capacity change from 0 to 128
[   51.716569][ T4110] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   51.744747][ T4110] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   51.851178][ T4126] pim6reg: entered allmulticast mode
[   51.863007][ T4127] netlink: 'syz.3.189': attribute type 1 has an invalid length.
[   51.871647][ T4127] netlink: 3 bytes leftover after parsing attributes in process `syz.3.189'.
[   51.880565][ T4126] pim6reg: left allmulticast mode
[   51.914073][ T4127] 0ªX¹¦À: renamed from caif0
[   51.920922][ T4127] 0ªX¹¦À: entered allmulticast mode
[   51.926183][ T4127] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   52.084763][ T4143] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[   52.093343][ T4143] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[   52.178702][ T4149] block device autoloading is deprecated and will be removed.
[   52.195787][ T4149] loop0: detected capacity change from 0 to 128
[   52.203245][ T4149] /dev/loop0: Can't open blockdev
[   52.300667][ T4156] loop0: detected capacity change from 0 to 512
[   52.308294][ T4156] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   52.321513][ T4156] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.204: invalid indirect mapped block 4294967295 (level 0)
[   52.336040][ T4156] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.204: invalid indirect mapped block 4294967295 (level 1)
[   52.350849][ T4156] EXT4-fs (loop0): 1 orphan inode deleted
[   52.356625][ T4156] EXT4-fs (loop0): 1 truncate cleaned up
[   52.363042][ T4156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.417403][ T4158] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   52.476790][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.489046][ T4162] netlink: 256 bytes leftover after parsing attributes in process `syz.4.206'.
[   52.506026][ T4162] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   52.514292][ T4162] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   52.540326][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'.
[   52.560095][ T4166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[   52.624449][ T3412] tipc: Node number set to 2886997007
[   52.643598][ T4170] SELinux: failed to load policy
[   53.097448][    C1] hrtimer: interrupt took 47429 ns
[   53.168390][ T4195] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[   53.176745][ T4195] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[   53.263063][ T4200] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[   53.272135][ T4174] syz.4.211 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   53.283102][ T4174] CPU: 1 UID: 0 PID: 4174 Comm: syz.4.211 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   53.283143][ T4174] Tainted: [W]=WARN
[   53.283151][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.283182][ T4174] Call Trace:
[   53.283190][ T4174]  <TASK>
[   53.283200][ T4174]  __dump_stack+0x1d/0x30
[   53.283244][ T4174]  dump_stack_lvl+0x95/0xd0
[   53.283273][ T4174]  dump_stack+0x15/0x1b
[   53.283309][ T4174]  dump_header+0x81/0x240
[   53.283336][ T4174]  oom_kill_process+0x295/0x350
[   53.283407][ T4174]  out_of_memory+0x97b/0xb80
[   53.283437][ T4174]  try_charge_memcg+0x610/0xa10
[   53.283581][ T4174]  charge_memcg+0x51/0xc0
[   53.283615][ T4174]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   53.283649][ T4174]  __read_swap_cache_async+0x17b/0x2d0
[   53.283713][ T4174]  swap_cluster_readahead+0x262/0x3c0
[   53.283759][ T4174]  swapin_readahead+0xde/0x820
[   53.283857][ T4174]  ? mod_memcg_lruvec_state+0x1a1/0x280
[   53.283969][ T4174]  ? lruvec_stat_mod_folio+0xd6/0x120
[   53.284001][ T4174]  ? __rcu_read_unlock+0x4f/0x70
[   53.284027][ T4174]  ? swap_cache_get_folio+0x277/0x280
[   53.284066][ T4174]  do_swap_page+0x2b4/0x21e0
[   53.284108][ T4174]  ? __pfx_default_wake_function+0x10/0x10
[   53.284287][ T4174]  handle_mm_fault+0x9d8/0x2c60
[   53.284341][ T4174]  do_user_addr_fault+0x630/0x1080
[   53.284381][ T4174]  exc_page_fault+0x62/0xa0
[   53.284480][ T4174]  asm_exc_page_fault+0x26/0x30
[   53.284511][ T4174] RIP: 0033:0x7efc311859ec
[   53.284528][ T4174] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   53.284551][ T4174] RSP: 002b:00007ffec3b1d6b0 EFLAGS: 00010202
[   53.284571][ T4174] RAX: 0000000000000000 RBX: 00007efc31505fa0 RCX: 0000000000000000
[   53.284639][ T4174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555580898808
[   53.284653][ T4174] RBP: 00007efc31507da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   53.284668][ T4174] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000d0f6
[   53.284684][ T4174] R13: 00007efc31506270 R14: ffffffffffffffff R15: 00007ffec3b1d7c0
[   53.284714][ T4174]  </TASK>
[   53.284774][ T4174] memory: usage 307200kB, limit 307200kB, failcnt 1046
[   53.451151][ T4204] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[   53.451478][ T4174] memory+swap: usage 280584kB, limit 9007199254740988kB, failcnt 0
[   53.522991][ T4174] kmem: usage 248596kB, limit 9007199254740988kB, failcnt 0
[   53.530393][ T4174] Memory cgroup stats for /syz4:
[   53.533092][ T4174] cache 524288
[   53.541530][ T4174] rss 8192
[   53.544573][ T4174] shmem 0
[   53.547658][ T4174] mapped_file 65536
[   53.551489][ T4174] dirty 0
[   53.554453][ T4174] writeback 0
[   53.557832][ T4174] workingset_refault_anon 30
[   53.562454][ T4174] workingset_refault_file 392
[   53.567239][ T4174] swap 176128
[   53.570610][ T4174] swapcached 40960
[   53.574349][ T4174] pgpgin 12612
[   53.577763][ T4174] pgpgout 12473
[   53.581299][ T4174] pgfault 14237
[   53.584772][ T4174] pgmajfault 20
[   53.588334][ T4174] inactive_anon 32768
[   53.589491][ T4200] bond1: entered promiscuous mode
[   53.592517][ T4174] active_anon 12288
[   53.601294][ T4174] inactive_file 0
[   53.605030][ T4174] active_file 524288
[   53.608978][ T4174] unevictable 0
[   53.612465][ T4174] hierarchical_memory_limit 314572800
[   53.617889][ T4174] hierarchical_memsw_limit 9223372036854771712
[   53.624496][ T4174] total_cache 524288
[   53.628436][ T4174] total_rss 8192
[   53.632008][ T4174] total_shmem 0
[   53.632027][ T4200] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.635484][ T4174] total_mapped_file 65536
[   53.635495][ T4174] total_dirty 0
[   53.635504][ T4174] total_writeback 0
[   53.635514][ T4174] total_workingset_refault_anon 30
[   53.659024][ T4174] total_workingset_refault_file 392
[   53.664261][ T4174] total_swap 176128
[   53.668290][ T4174] total_swapcached 40960
[   53.672554][ T4174] total_pgpgin 12612
[   53.676467][ T4174] total_pgpgout 12473
[   53.680549][ T4174] total_pgfault 14237
[   53.684665][ T4174] total_pgmajfault 20
[   53.688737][ T4174] total_inactive_anon 32768
[   53.693269][ T4174] total_active_anon 12288
[   53.697676][ T4174] total_inactive_file 0
[   53.701918][ T4174] total_active_file 524288
[   53.706358][ T4174] total_unevictable 0
[   53.710403][ T4174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.211,pid=4174,uid=0
[   53.725087][ T4174] Memory cgroup out of memory: Killed process 4174 (syz.4.211) total-vm:100384kB, anon-rss:1136kB, file-rss:26688kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[   53.831898][ T3325] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   53.842970][ T3325] CPU: 1 UID: 0 PID: 3325 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   53.843054][ T3325] Tainted: [W]=WARN
[   53.843135][ T3325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.843148][ T3325] Call Trace:
[   53.843157][ T3325]  <TASK>
[   53.843167][ T3325]  __dump_stack+0x1d/0x30
[   53.843241][ T3325]  dump_stack_lvl+0x95/0xd0
[   53.843269][ T3325]  dump_stack+0x15/0x1b
[   53.843294][ T3325]  dump_header+0x81/0x240
[   53.843350][ T3325]  oom_kill_process+0x295/0x350
[   53.843379][ T3325]  out_of_memory+0x97b/0xb80
[   53.843436][ T3325]  try_charge_memcg+0x610/0xa10
[   53.843489][ T3325]  charge_memcg+0x51/0xc0
[   53.843519][ T3325]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   53.843574][ T3325]  __read_swap_cache_async+0x17b/0x2d0
[   53.843610][ T3325]  swap_cluster_readahead+0x362/0x3c0
[   53.843648][ T3325]  swapin_readahead+0xde/0x820
[   53.843799][ T3325]  ? mod_memcg_lruvec_state+0x1a1/0x280
[   53.843918][ T3325]  ? __rcu_read_unlock+0x34/0x70
[   53.843943][ T3325]  ? __rcu_read_unlock+0x4f/0x70
[   53.844013][ T3325]  ? swap_cache_get_folio+0x277/0x280
[   53.844046][ T3325]  do_swap_page+0x2b4/0x21e0
[   53.844090][ T3325]  ? __pfx_default_wake_function+0x10/0x10
[   53.844204][ T3325]  handle_mm_fault+0x9d8/0x2c60
[   53.844244][ T3325]  do_user_addr_fault+0x630/0x1080
[   53.844299][ T3325]  exc_page_fault+0x62/0xa0
[   53.844356][ T3325]  asm_exc_page_fault+0x26/0x30
[   53.844376][ T3325] RIP: 0033:0x7fe3eb68f6f9
[   53.844397][ T3325] Code: 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 7b 62 ff ff 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 <c3> e8 b1 32 00 00 90 b8 4d 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01
[   53.844420][ T3325] RSP: 002b:00007ffe316598b8 EFLAGS: 00010206
[   53.844440][ T3325] RAX: 0000000000000000 RBX: 000000000000007c RCX: 00007fe3eb6c1fc3
[   53.844455][ T3325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   53.844469][ T3325] RBP: 00007ffe316598fc R08: 0000000023f9c484 R09: 0000000000000000
[   53.844496][ T3325] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[   53.844508][ T3325] R13: 00000000000927c0 R14: 000000000000ceb8 R15: 00007ffe31659950
[   53.844531][ T3325]  </TASK>
[   53.844539][ T3325] memory: usage 307200kB, limit 307200kB, failcnt 14723
[   54.066735][ T3325] memory+swap: usage 307428kB, limit 9007199254740988kB, failcnt 0
[   54.074703][ T3325] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[   54.082140][ T3325] Memory cgroup stats for /syz3:
[   54.108286][ T3325] cache 0
[   54.116368][ T3325] rss 0
[   54.119263][ T3325] shmem 0
[   54.122224][ T3325] mapped_file 0
[   54.125718][ T3325] dirty 0
[   54.128750][ T3325] writeback 0
[   54.132117][ T3325] workingset_refault_anon 210
[   54.136822][ T3325] workingset_refault_file 785
[   54.141609][ T3325] swap 233472
[   54.144939][ T3325] swapcached 0
[   54.148421][ T3325] pgpgin 31186
[   54.151822][ T3325] pgpgout 31185
[   54.155299][ T3325] pgfault 7047
[   54.158738][ T3325] pgmajfault 108
[   54.162328][ T3325] inactive_anon 0
[   54.166013][ T3325] active_anon 0
[   54.169722][ T3325] inactive_file 0
[   54.173380][ T3325] active_file 4096
[   54.177122][ T3325] unevictable 0
[   54.180681][ T3325] hierarchical_memory_limit 314572800
[   54.186081][ T3325] hierarchical_memsw_limit 9223372036854771712
[   54.192347][ T3325] total_cache 0
[   54.195836][ T3325] total_rss 0
[   54.199253][ T3325] total_shmem 0
[   54.202752][ T3325] total_mapped_file 0
[   54.206941][ T3325] total_dirty 0
[   54.210455][ T3325] total_writeback 0
[   54.214324][ T3325] total_workingset_refault_anon 210
[   54.219599][ T3325] total_workingset_refault_file 785
[   54.224825][ T3325] total_swap 233472
[   54.228682][ T3325] total_swapcached 0
[   54.232593][ T3325] total_pgpgin 31186
[   54.236528][ T3325] total_pgpgout 31185
[   54.240594][ T3325] total_pgfault 7047
[   54.244507][ T3325] total_pgmajfault 108
[   54.248658][ T3325] total_inactive_anon 0
[   54.252838][ T3325] total_active_anon 0
[   54.256837][ T3325] total_inactive_file 0
[   54.261049][ T3325] total_active_file 4096
[   54.265309][ T3325] total_unevictable 0
[   54.269333][ T3325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.210,pid=4171,uid=0
[   54.283988][ T3325] Memory cgroup out of memory: Killed process 4171 (syz.3.210) total-vm:98336kB, anon-rss:1264kB, file-rss:26668kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[   54.525789][ T4172] syz.3.210 (4172) used greatest stack depth: 7264 bytes left
[   54.534575][ T4215] Cannot find add_set index 0 as target
[   54.757112][ T4235] syz.3.230 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   54.821985][ T4241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58384 sclass=netlink_route_socket pid=4241 comm=syz.4.232
[   54.856910][ T3325] ==================================================================
[   54.865058][ T3325] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr
[   54.872997][ T3325] 
[   54.875354][ T3325] read-write to 0xffff88811c17c818 of 8 bytes by task 4243 on cpu 0:
[   54.883447][ T3325]  shmem_add_to_page_cache+0x418/0x530
[   54.888987][ T3325]  shmem_get_folio_gfp+0x4e8/0xd50
[   54.894127][ T3325]  shmem_write_begin+0xfc/0x1f0
[   54.899008][ T3325]  generic_perform_write+0x184/0x490
[   54.904325][ T3325]  shmem_file_write_iter+0xc5/0xf0
[   54.909477][ T3325]  __kernel_write_iter+0x2d6/0x540
[   54.914698][ T3325]  dump_user_range+0x61e/0x8f0
[   54.919508][ T3325]  elf_core_dump+0x1de7/0x1f80
[   54.924303][ T3325]  coredump_write+0xacf/0xdf0
[   54.929011][ T3325]  vfs_coredump+0x24f7/0x2e60
[   54.933710][ T3325]  get_signal+0xd84/0xf70
[   54.938068][ T3325]  arch_do_signal_or_restart+0x96/0x450
[   54.943645][ T3325]  irqentry_exit+0xf9/0x560
[   54.948183][ T3325]  exc_general_protection+0x15b/0x1e0
[   54.953571][ T3325]  asm_exc_general_protection+0x26/0x30
[   54.959142][ T3325] 
[   54.961550][ T3325] read to 0xffff88811c17c818 of 8 bytes by task 3325 on cpu 1:
[   54.969111][ T3325]  shmem_getattr+0x68/0x200
[   54.973649][ T3325]  vfs_getattr_nosec+0x146/0x1e0
[   54.978615][ T3325]  vfs_statx+0x113/0x390
[   54.982884][ T3325]  vfs_fstatat+0x115/0x170
[   54.987342][ T3325]  __se_sys_newfstatat+0x55/0x260
[   54.992396][ T3325]  __x64_sys_newfstatat+0x55/0x70
[   54.997453][ T3325]  x64_sys_call+0x111f/0x3000
[   55.002160][ T3325]  do_syscall_64+0xca/0x2b0
[   55.006693][ T3325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.012613][ T3325] 
[   55.014953][ T3325] value changed: 0x0000000000000045 -> 0x0000000000000046
[   55.022155][ T3325] 
[   55.024494][ T3325] Reported by Kernel Concurrency Sanitizer on:
[   55.030663][ T3325] CPU: 1 UID: 0 PID: 3325 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   55.042166][ T3325] Tainted: [W]=WARN
[   55.045991][ T3325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.056153][ T3325] ==================================================================