last executing test programs:

10.921566608s ago: executing program 1 (id=11):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
pipe2$9p(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = inotify_init1(0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = msgget$private(0x0, 0x0)
setreuid(0x0, 0xee00)
msgctl$MSG_STAT(r3, 0xb, 0x0)
fcntl$lock(r1, 0x26, &(0x7f00000003c0)={0x1, 0x2, 0x2, 0x2})
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x7d02b2701e884fae, 0x0)
msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03dc027b0f84f12f000000000000000000f5d166b5ce7964276420be6e06ce85f3d12675aec7e759127844a50474a93d95eb53b3035829e0ef33228be1bee54f64eef61548b76accea8dae096827d67c18291a08e321b5d1cee567d859afe05c098a432802e0d9752fd08f479c3b61b65ab9c5b5e92331483e7d174538ebf13f68a0b085f1b10f0a6b9a85cfa2ff9e7a7a9fce2d6de766f094f45958954b811354a4c0bc04cbd5f1b60b2e8c25dc2ef1aff32cc8a099a4d835816f737167c48d12459285960436"], 0x11, 0x800)
msgrcv(0x0, &(0x7f0000000480), 0x3c, 0x1, 0x3800)

10.869372263s ago: executing program 1 (id=12):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x0)
connect$qrtr(r1, &(0x7f0000000340)={0x2a, 0x0, 0x4001}, 0xc)
ioctl$USBDEVFS_CONNECTINFO(r2, 0x5452, &(0x7f0000000000))
r3 = gettid()
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10)

10.002242593s ago: executing program 1 (id=16):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_icmp(0x2, 0x2, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x101000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffe3a, &(0x7f0000000180)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010)

8.912245372s ago: executing program 1 (id=24):
pipe(&(0x7f00000001c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_io_uring_setup(0x46a3, &(0x7f00000001c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
io_uring_setup(0x1928, &(0x7f0000000240))
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

8.765589396s ago: executing program 1 (id=27):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x20000000}, 0x8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xffffffff, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_open_procfs(0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
sync()
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

7.840583851s ago: executing program 1 (id=33):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)
pipe2$9p(&(0x7f00000013c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r3, 0x0, 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
chdir(&(0x7f0000000200)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
open(&(0x7f00000000c0)='./bus\x00', 0x400141042, 0x0)

3.266424841s ago: executing program 0 (id=82):
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x4, @empty, 0x844}, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x9d6}, @in6={0xa, 0x4e21, 0x18c, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1f}], 0x64)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00')

3.146966842s ago: executing program 0 (id=83):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x9, 0x200, 0x2})

3.137358192s ago: executing program 2 (id=84):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='7', 0x1}], 0x1)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB])
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0})
io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0)

2.72986378s ago: executing program 0 (id=89):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000001fa40)={0xa, 0x4e26, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037073d223b3c1b324debec40e57a050000007eb48821996aff1e7154e746be4d7606000000c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd352a000000988d13"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @empty}}, 0x0, 0x0, 0x2d, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

2.662909196s ago: executing program 0 (id=90):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x1da18f8a264830ea)
mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xbc}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x33fe0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x26042, 0x0)

2.661841896s ago: executing program 2 (id=91):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000001f80)=r4}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0)

1.454793227s ago: executing program 3 (id=99):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000010c0)={0x2ce4, 0x81, 0x0, 0x1ff, 0x0, "610400"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xa)
close(r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000600000018001680"], 0x3c}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x4c}}, 0x0)

1.303835611s ago: executing program 4 (id=100):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x9, 0x200, 0x2})

1.299424551s ago: executing program 3 (id=101):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

970.606911ms ago: executing program 4 (id=102):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000007"], 0x48)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="86", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="110000"], 0x200}}], 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5801000002010300000000000000000005000004140005800e0001006674702d323030303000000068000d8024000380060002004e220000060002004e240000060002004e230000060001004e2200001400040000000000000000000000ffffe00000020400038014000400ff01000000000000000000000000000114000500fe80000000000000000000000000000a0600124000020000080015"], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x20000004)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040))
setsockopt$inet_dccp_int(r2, 0x21, 0xa, &(0x7f00000001c0)=0x10000, 0x4)

937.689914ms ago: executing program 2 (id=103):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback, {[@generic={0x0, 0x9, "ba8fab810cab6c"}]}}}}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@exit]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00'}, 0x10)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r4, &(0x7f000001a340)=[{&(0x7f0000000240)=""/51, 0x33}], 0x1)
fsmount(r0, 0x0, 0x0)

928.397255ms ago: executing program 0 (id=104):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10)
flock(r3, 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r4, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)

839.958203ms ago: executing program 4 (id=105):
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x4, @empty, 0x844}, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x9d6}, @in6={0xa, 0x4e21, 0x18c, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1f}], 0x64)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00')

817.039605ms ago: executing program 4 (id=106):
socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0xfffe}, @rumble})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0xfffffffc, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@remote}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r3 = socket(0x0, 0x3, 0x0)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1508}}, 0x800)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001000)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0}}], 0x2, 0x81)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004040)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)

404.166513ms ago: executing program 3 (id=107):
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x4, @empty, 0x844}, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x9d6}, @in6={0xa, 0x4e21, 0x18c, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1f}], 0x64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00')

391.396744ms ago: executing program 3 (id=108):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x9, 0x200, 0x2})

164.566225ms ago: executing program 4 (id=109):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000010c0)={0x2ce4, 0x81, 0x0, 0x1ff, 0x0, "610400"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xa)
close(r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000600000018001680"], 0x3c}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x4c}}, 0x0)

79.472553ms ago: executing program 2 (id=110):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000010c0)={0x2ce4, 0x81, 0x0, 0x1ff, 0x0, "610400"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xa)
close(r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000600000018001680"], 0x3c}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fbdfd09172c182c60400000014000500000000000000000000000000000000010800020005000000140006"], 0x4c}}, 0x0)

67.603684ms ago: executing program 4 (id=111):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@exit]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00'}, 0x10)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r4, &(0x7f000001a340)=[{&(0x7f0000000240)=""/51, 0x33}], 0x1)
fsmount(r0, 0x0, 0x0)

49.516796ms ago: executing program 3 (id=112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000010c0)={0x2ce4, 0x81, 0x0, 0x1ff, 0x0, "610400"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xa)
close(r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000600000018001680"], 0x3c}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x4c}}, 0x0)

40.548067ms ago: executing program 0 (id=113):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x9, 0x200, 0x2})

19.037289ms ago: executing program 2 (id=114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000001f80)=r4}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0)

695.98µs ago: executing program 3 (id=115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x1da18f8a264830ea)
mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xbc}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x33fe0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x26042, 0x0)

0s ago: executing program 2 (id=125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000001f80)=r4}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

[   17.633657][   T29] audit: type=1400 audit(1726751703.355:81): avc:  denied  { read } for  pid=2946 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.214' (ED25519) to the list of known hosts.
[   20.534733][   T29] audit: type=1400 audit(1726751706.245:82): avc:  denied  { mounton } for  pid=3249 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.535272][ T3249] cgroup: Unknown subsys name 'net'
[   20.557716][   T29] audit: type=1400 audit(1726751706.245:83): avc:  denied  { mount } for  pid=3249 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.585073][   T29] audit: type=1400 audit(1726751706.285:84): avc:  denied  { unmount } for  pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.745779][ T3249] cgroup: Unknown subsys name 'cpuset'
[   20.751956][ T3249] cgroup: Unknown subsys name 'rlimit'
[   20.868250][   T29] audit: type=1400 audit(1726751706.585:85): avc:  denied  { setattr } for  pid=3249 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.891554][   T29] audit: type=1400 audit(1726751706.585:86): avc:  denied  { create } for  pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   20.911982][   T29] audit: type=1400 audit(1726751706.585:87): avc:  denied  { write } for  pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   20.932382][   T29] audit: type=1400 audit(1726751706.585:88): avc:  denied  { read } for  pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   20.952768][   T29] audit: type=1400 audit(1726751706.585:89): avc:  denied  { mounton } for  pid=3249 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   20.959707][ T3253] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   20.977542][   T29] audit: type=1400 audit(1726751706.585:90): avc:  denied  { mount } for  pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.009505][   T29] audit: type=1400 audit(1726751706.705:91): avc:  denied  { relabelto } for  pid=3253 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.039444][ T3249] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.739228][ T3262] chnl_net:caif_netlink_parms(): no params data found
[   22.753475][ T3261] chnl_net:caif_netlink_parms(): no params data found
[   22.810786][ T3272] chnl_net:caif_netlink_parms(): no params data found
[   22.827776][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.836312][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.843476][ T3261] bridge_slave_0: entered allmulticast mode
[   22.849878][ T3261] bridge_slave_0: entered promiscuous mode
[   22.856549][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.863705][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.871118][ T3261] bridge_slave_1: entered allmulticast mode
[   22.877543][ T3261] bridge_slave_1: entered promiscuous mode
[   22.913082][ T3268] chnl_net:caif_netlink_parms(): no params data found
[   22.950936][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.960055][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.967119][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.974228][ T3262] bridge_slave_0: entered allmulticast mode
[   22.980767][ T3262] bridge_slave_0: entered promiscuous mode
[   22.990586][ T3266] chnl_net:caif_netlink_parms(): no params data found
[   23.003948][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.013328][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.020628][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.027878][ T3272] bridge_slave_0: entered allmulticast mode
[   23.034416][ T3272] bridge_slave_0: entered promiscuous mode
[   23.041173][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.048303][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.055685][ T3262] bridge_slave_1: entered allmulticast mode
[   23.062335][ T3262] bridge_slave_1: entered promiscuous mode
[   23.082427][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.089860][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.097646][ T3272] bridge_slave_1: entered allmulticast mode
[   23.104125][ T3272] bridge_slave_1: entered promiscuous mode
[   23.130896][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.152987][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.165314][ T3261] team0: Port device team_slave_0 added
[   23.171933][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.183987][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.201737][ T3261] team0: Port device team_slave_1 added
[   23.221175][ T3272] team0: Port device team_slave_0 added
[   23.244259][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.251359][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.258789][ T3268] bridge_slave_0: entered allmulticast mode
[   23.265219][ T3268] bridge_slave_0: entered promiscuous mode
[   23.276546][ T3262] team0: Port device team_slave_0 added
[   23.283068][ T3272] team0: Port device team_slave_1 added
[   23.293586][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.300698][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.307848][ T3266] bridge_slave_0: entered allmulticast mode
[   23.314266][ T3266] bridge_slave_0: entered promiscuous mode
[   23.320912][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.328074][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.335264][ T3266] bridge_slave_1: entered allmulticast mode
[   23.341441][ T3266] bridge_slave_1: entered promiscuous mode
[   23.347937][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.354880][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.380938][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.392462][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.399541][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.406761][ T3268] bridge_slave_1: entered allmulticast mode
[   23.413213][ T3268] bridge_slave_1: entered promiscuous mode
[   23.420220][ T3262] team0: Port device team_slave_1 added
[   23.435631][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.442723][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.468814][ T3272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.483992][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.491338][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.517251][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.536717][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.543678][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.569692][ T3272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.589050][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.602489][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.609555][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.635563][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.646886][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.653876][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.679933][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.698020][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.708172][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.734037][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.753005][ T3266] team0: Port device team_slave_0 added
[   23.771744][ T3261] hsr_slave_0: entered promiscuous mode
[   23.778680][ T3261] hsr_slave_1: entered promiscuous mode
[   23.789295][ T3268] team0: Port device team_slave_0 added
[   23.795564][ T3266] team0: Port device team_slave_1 added
[   23.803040][ T3272] hsr_slave_0: entered promiscuous mode
[   23.809289][ T3272] hsr_slave_1: entered promiscuous mode
[   23.815213][ T3272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   23.822754][ T3272] Cannot create hsr debugfs directory
[   23.833323][ T3268] team0: Port device team_slave_1 added
[   23.853002][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.859987][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.886039][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.905942][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.913063][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.939147][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.958290][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.965359][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.991421][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.003727][ T3262] hsr_slave_0: entered promiscuous mode
[   24.010095][ T3262] hsr_slave_1: entered promiscuous mode
[   24.016046][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   24.023672][ T3262] Cannot create hsr debugfs directory
[   24.029738][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.037028][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   24.063075][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.121619][ T3268] hsr_slave_0: entered promiscuous mode
[   24.128000][ T3268] hsr_slave_1: entered promiscuous mode
[   24.133895][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   24.141456][ T3268] Cannot create hsr debugfs directory
[   24.162869][ T3266] hsr_slave_0: entered promiscuous mode
[   24.168910][ T3266] hsr_slave_1: entered promiscuous mode
[   24.174811][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   24.182460][ T3266] Cannot create hsr debugfs directory
[   24.309607][ T3261] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   24.318034][ T3261] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   24.334453][ T3261] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   24.352419][ T3261] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   24.374777][ T3272] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   24.383340][ T3272] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   24.395962][ T3272] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   24.404210][ T3272] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   24.427735][ T3262] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   24.438608][ T3262] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   24.459053][ T3262] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   24.468155][ T3262] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   24.479310][ T3268] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   24.495128][ T3268] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   24.503592][ T3268] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   24.514324][ T3268] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   24.540544][ T3266] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   24.548993][ T3266] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   24.560848][ T3266] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   24.570031][ T3266] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   24.595383][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.621875][ T3261] 8021q: adding VLAN 0 to HW filter on device team0
[   24.637414][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.644545][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.654859][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.661944][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.671039][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.692694][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.702366][ T3272] 8021q: adding VLAN 0 to HW filter on device team0
[   24.716817][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.723873][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.746013][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.753172][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.766122][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.787213][ T3268] 8021q: adding VLAN 0 to HW filter on device team0
[   24.802507][ T3262] 8021q: adding VLAN 0 to HW filter on device team0
[   24.821585][ T3272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   24.841498][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.848615][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.857614][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.864642][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.875589][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.882661][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.891185][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.898285][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.926355][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.957500][ T3266] 8021q: adding VLAN 0 to HW filter on device team0
[   24.976560][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   24.990411][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.997544][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.007294][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.014600][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.033899][ T3266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   25.044399][ T3266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.071102][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.088166][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.143023][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.174066][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.217605][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.262022][ T3261] veth0_vlan: entered promiscuous mode
[   25.283253][ T3272] veth0_vlan: entered promiscuous mode
[   25.294840][ T3261] veth1_vlan: entered promiscuous mode
[   25.316382][ T3272] veth1_vlan: entered promiscuous mode
[   25.333057][ T3266] veth0_vlan: entered promiscuous mode
[   25.349756][ T3272] veth0_macvtap: entered promiscuous mode
[   25.358188][ T3261] veth0_macvtap: entered promiscuous mode
[   25.374018][ T3266] veth1_vlan: entered promiscuous mode
[   25.387682][ T3261] veth1_macvtap: entered promiscuous mode
[   25.394573][ T3272] veth1_macvtap: entered promiscuous mode
[   25.413696][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.423004][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.438295][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   25.448945][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   25.459823][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.472834][ T3266] veth0_macvtap: entered promiscuous mode
[   25.480255][ T3272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.489054][ T3272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.497832][ T3272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.506594][ T3272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.522290][ T3268] veth0_vlan: entered promiscuous mode
[   25.528742][ T3266] veth1_macvtap: entered promiscuous mode
[   25.540317][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   25.550851][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   25.561710][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.571260][ T3261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.580104][ T3261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.588872][ T3261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.597683][ T3261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.611627][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   25.622232][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   25.632206][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   25.642735][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   25.653653][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.665701][ T3262] veth0_vlan: entered promiscuous mode
[   25.671980][ T3268] veth1_vlan: entered promiscuous mode
[   25.679938][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   25.690533][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   25.700457][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   25.710883][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   25.721372][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.730712][ T3266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.739564][ T3266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.748302][ T3266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.757408][ T3266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.778325][ T3262] veth1_vlan: entered promiscuous mode
[   25.790202][   T29] kauditd_printk_skb: 18 callbacks suppressed
[   25.790215][   T29] audit: type=1400 audit(1726751711.505:110): avc:  denied  { mounton } for  pid=3261 comm="syz-executor" path="/root/syzkaller.VIHwD2/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   25.797870][ T3268] veth0_macvtap: entered promiscuous mode
[   25.828379][   T29] audit: type=1400 audit(1726751711.505:111): avc:  denied  { mount } for  pid=3261 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   25.850671][   T29] audit: type=1400 audit(1726751711.505:112): avc:  denied  { mounton } for  pid=3261 comm="syz-executor" path="/root/syzkaller.VIHwD2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   25.876134][   T29] audit: type=1400 audit(1726751711.505:113): avc:  denied  { mount } for  pid=3261 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   25.898081][   T29] audit: type=1400 audit(1726751711.505:114): avc:  denied  { unmount } for  pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   25.919421][   T29] audit: type=1400 audit(1726751711.545:115): avc:  denied  { mounton } for  pid=3261 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   25.950829][ T3262] veth0_macvtap: entered promiscuous mode
[   25.960172][ T3268] veth1_macvtap: entered promiscuous mode
[   25.975597][ T3262] veth1_macvtap: entered promiscuous mode
[   25.983309][   T29] audit: type=1400 audit(1726751711.685:116): avc:  denied  { read write } for  pid=3261 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   26.007454][   T29] audit: type=1400 audit(1726751711.685:118): avc:  denied  { open } for  pid=3261 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   26.031525][   T29] audit: type=1400 audit(1726751711.685:117): avc:  denied  { read write } for  pid=3272 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   26.055926][   T29] audit: type=1400 audit(1726751711.685:119): avc:  denied  { ioctl } for  pid=3261 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   26.091056][ T3404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'.
[   26.136126][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.146606][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.156469][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.167013][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.176846][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.187281][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.198406][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.220264][ T3410] loop0: detected capacity change from 0 to 512
[   26.227085][ T3410] =======================================================
[   26.227085][ T3410] WARNING: The mand mount option has been deprecated and
[   26.227085][ T3410]          and is ignored by this kernel. Remove the mand
[   26.227085][ T3410]          option from the mount to silence this warning.
[   26.227085][ T3410] =======================================================
[   26.232612][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.272505][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.282437][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.292955][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.302769][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.313215][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.323026][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.333548][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.345793][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.347442][ T3410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   26.371456][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.381946][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.391874][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.402405][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.402678][ T3410] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   26.412238][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.412253][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.445646][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.464782][ T3262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.473618][ T3262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.482435][ T3262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.491237][ T3262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.512565][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.523180][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.533199][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.543747][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.553671][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.564173][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.574260][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.584706][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.597323][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.619580][ T3268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.628455][ T3268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.637512][ T3268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.646401][ T3268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.667442][ T3423] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9'.
[   26.676496][ T3423] unsupported nlmsg_type 40
[   26.692496][ T3423] syz.1.9 (3423) used greatest stack depth: 11024 bytes left
[   26.715301][ T3427] capability: warning: `syz.1.11' uses deprecated v2 capabilities in a way that may be insecure
[   26.782807][ T3435] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET)
[   26.800950][ T3432] loop1: detected capacity change from 0 to 4096
[   26.812487][ T3432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   26.965278][    C0] hrtimer: interrupt took 27636 ns
[   27.080855][ T3272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.218888][ T3441] loop2: detected capacity change from 0 to 2048
[   27.290928][ T3441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   27.439012][ T3441] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.13: bg 0: block 234: padding at end of block bitmap is not set
[   27.460792][ T3441] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 312 with error 28
[   27.480992][ T3441] EXT4-fs (loop2): This should not happen!! Data will be lost
[   27.480992][ T3441] 
[   27.491821][ T3441] EXT4-fs (loop2): Total free blocks count 0
[   27.498053][ T3441] EXT4-fs (loop2): Free/Dirty block details
[   27.504312][ T3441] EXT4-fs (loop2): free_blocks=0
[   27.509650][ T3441] EXT4-fs (loop2): dirty_blocks=320
[   27.515221][ T3441] EXT4-fs (loop2): Block reservation details
[   27.521460][ T3441] EXT4-fs (loop2): i_reserved_data_blocks=20
[   27.544975][ T3441] syz.2.13 (3441) used greatest stack depth: 9840 bytes left
[   27.578591][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.622148][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.710021][ T3485] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   27.835679][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   27.844554][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   27.851996][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0
[   27.866782][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   27.874410][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1
[   28.252761][ T3602] loop3: detected capacity change from 0 to 128
[   28.310082][ T3602] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   28.356909][ T3602] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.470327][ T3640] loop0: detected capacity change from 0 to 2048
[   28.567495][ T3640]  loop0: p1 < > p4
[   28.587680][ T3640] loop0: p4 size 8388608 extends beyond EOD, truncated
[   28.625157][ T2964]  loop0: p1 < > p4
[   28.641269][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated
[   28.701945][ T2964]  loop0: p1 < > p4
[   28.714896][ T2964] loop0: p4 size 8388608 extends beyond EOD, truncated
[   28.768793][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   28.776406][ T3405] udevd[3405]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   28.787821][ T3700] loop2: detected capacity change from 0 to 512
[   28.801788][ T3405] udevd[3405]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   28.812455][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   28.986186][ T3700] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.26: Failed to acquire dquot type 1
[   28.994662][ T3758] loop4: detected capacity change from 0 to 512
[   29.000394][ T3757] loop1: detected capacity change from 0 to 512
[   29.126836][ T3700] EXT4-fs (loop2): 1 truncate cleaned up
[   29.132873][ T3700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.145896][ T3700] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.163487][ T3700] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.26: Failed to acquire dquot type 1
[   29.250909][ T3757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.277738][ T3757] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.323810][ T3757] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.27: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   29.341246][ T3757] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   29.359205][ T3757] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.27: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   29.379726][ T3757] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   29.388954][ T3757] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.27: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   29.406446][ T3757] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   29.418204][ T3757] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.27: bg 0: block 18: invalid block bitmap
[   29.469679][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.506946][ T3757] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.27: Failed to acquire dquot type 1
[   29.560986][ T3262] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   29.570518][ T3775] IPv6: Can't replace route, no match found
[   29.596159][ T3777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'.
[   29.632489][ T3777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.30'.
[   29.677287][ T3775] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.27: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[   29.710267][ T3775] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   29.723053][ T3775] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.27: Failed to acquire dquot type 1
[   29.744787][ T3757] syz.1.27 (3757) used greatest stack depth: 9224 bytes left
[   29.764766][ T3781] loop2: detected capacity change from 0 to 132
[   29.781237][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.839341][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1
[   29.846899][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.854369][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.861811][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.869240][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.876669][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.884067][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4
[   29.891615][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.899089][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2
[   29.906506][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.914023][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.921440][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.928991][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.936431][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4
[   29.943830][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951290][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951314][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951381][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951400][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951420][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951443][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951467][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951491][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951551][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951571][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951593][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951617][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951647][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951666][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951735][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951755][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951776][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951867][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951891][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951915][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951935][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951957][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.951979][ T3331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   30.044139][ T3331] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   30.229906][ T3792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'.
[   30.241384][ T3794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.37'.
[   30.332121][ T3804] loop4: detected capacity change from 0 to 512
[   30.347807][ T3805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'.
[   30.357804][ T3804] EXT4-fs: Ignoring removed nobh option
[   30.366688][ T3805] netlink: 36 bytes leftover after parsing attributes in process `syz.0.42'.
[   30.382153][ T3804] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   30.395273][ T3804] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   30.419250][ T3804] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   30.452485][ T3808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.43'.
[   30.476189][ T3804] EXT4-fs (loop4): 1 truncate cleaned up
[   30.490670][ T3804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.030427][ T3798] syz.4.39 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[   31.044537][ T3798] CPU: 0 UID: 0 PID: 3798 Comm: syz.4.39 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[   31.054714][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   31.064770][ T3798] Call Trace:
[   31.068135][ T3798]  <TASK>
[   31.071067][ T3798]  dump_stack_lvl+0xf2/0x150
[   31.075768][ T3798]  dump_stack+0x15/0x20
[   31.080064][ T3798]  dump_header+0x83/0x2d0
[   31.084403][ T3798]  oom_kill_process+0x341/0x4c0
[   31.089731][ T3798]  out_of_memory+0x9af/0xbe0
[   31.094377][ T3798]  ? __rcu_read_unlock+0x4e/0x70
[   31.099384][ T3798]  mem_cgroup_out_of_memory+0x13e/0x190
[   31.104950][ T3798]  try_charge_memcg+0x51b/0x810
[   31.109845][ T3798]  obj_cgroup_charge_pages+0xbd/0x1a0
[   31.115244][ T3798]  __memcg_kmem_charge_page+0x9d/0x170
[   31.120767][ T3798]  __alloc_pages_noprof+0x1bc/0x360
[   31.126023][ T3798]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   31.131403][ T3798]  alloc_pages_noprof+0xe1/0x100
[   31.136386][ T3798]  __vmalloc_node_range_noprof+0x736/0xec0
[   31.142203][ T3798]  __kvmalloc_node_noprof+0x121/0x170
[   31.147602][ T3798]  ? ip_set_alloc+0x1f/0x30
[   31.152207][ T3798]  ip_set_alloc+0x1f/0x30
[   31.156622][ T3798]  hash_netiface_create+0x273/0x730
[   31.161972][ T3798]  ? __nla_parse+0x40/0x60
[   31.166396][ T3798]  ? __pfx_hash_netiface_create+0x10/0x10
[   31.172207][ T3798]  ip_set_create+0x359/0x8a0
[   31.176811][ T3798]  ? strnstr+0xf1/0x100
[   31.181117][ T3798]  ? __nla_parse+0x40/0x60
[   31.185586][ T3798]  nfnetlink_rcv_msg+0x4a9/0x570
[   31.190601][ T3798]  netlink_rcv_skb+0x12c/0x230
[   31.195450][ T3798]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   31.200938][ T3798]  nfnetlink_rcv+0x16c/0x15c0
[   31.205667][ T3798]  ? kmem_cache_free+0xdd/0x2d0
[   31.210524][ T3798]  ? nlmon_xmit+0x51/0x60
[   31.214926][ T3798]  ? __kfree_skb+0x102/0x150
[   31.219601][ T3798]  ? consume_skb+0x49/0x160
[   31.224173][ T3798]  ? nlmon_xmit+0x51/0x60
[   31.228515][ T3798]  ? dev_hard_start_xmit+0x3c1/0x3f0
[   31.233848][ T3798]  ? __dev_queue_xmit+0xb8a/0x1fe0
[   31.239070][ T3798]  ? ref_tracker_free+0x3a5/0x410
[   31.244107][ T3798]  ? __dev_queue_xmit+0x161/0x1fe0
[   31.249251][ T3798]  ? __netlink_deliver_tap+0x495/0x4c0
[   31.254805][ T3798]  netlink_unicast+0x599/0x670
[   31.259581][ T3798]  netlink_sendmsg+0x5cc/0x6e0
[   31.264426][ T3798]  ? __pfx_netlink_sendmsg+0x10/0x10
[   31.269723][ T3798]  __sock_sendmsg+0x140/0x180
[   31.274488][ T3798]  ____sys_sendmsg+0x312/0x410
[   31.279305][ T3798]  __sys_sendmsg+0x1dd/0x270
[   31.284022][ T3798]  ? futex_wait+0x18e/0x1c0
[   31.288569][ T3798]  __x64_sys_sendmsg+0x46/0x50
[   31.293394][ T3798]  x64_sys_call+0x2689/0x2d60
[   31.298149][ T3798]  do_syscall_64+0xc9/0x1c0
[   31.302858][ T3798]  ? clear_bhb_loop+0x55/0xb0
[   31.307548][ T3798]  ? clear_bhb_loop+0x55/0xb0
[   31.312626][ T3798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.318613][ T3798] RIP: 0033:0x7f2d9334def9
[   31.323070][ T3798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   31.342811][ T3798] RSP: 002b:00007f2d91fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   31.351238][ T3798] RAX: ffffffffffffffda RBX: 00007f2d93505f80 RCX: 00007f2d9334def9
[   31.359218][ T3798] RDX: 1da18f8a264830ea RSI: 0000000020000040 RDI: 0000000000000003
[   31.367293][ T3798] RBP: 00007f2d933c0b76 R08: 0000000000000000 R09: 0000000000000000
[   31.375285][ T3798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.383322][ T3798] R13: 0000000000000000 R14: 00007f2d93505f80 R15: 00007ffc02f16fd8
[   31.391309][ T3798]  </TASK>
[   31.395112][ T3798] memory: usage 307200kB, limit 307200kB, failcnt 173
[   31.401893][ T3798] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0
[   31.410310][ T3798] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0
[   31.417735][ T3798] Memory cgroup stats for /syz4:
[   31.421169][ T3798] cache 98304
[   31.429468][ T3798] rss 36864
[   31.432625][ T3798] shmem 0
[   31.435599][ T3798] mapped_file 86016
[   31.439445][ T3798] dirty 98304
[   31.442718][ T3798] writeback 0
[   31.446096][ T3798] workingset_refault_anon 65
[   31.450681][ T3798] workingset_refault_file 31
[   31.455529][ T3798] swap 409600
[   31.458825][ T3798] swapcached 49152
[   31.462543][ T3798] pgpgin 6320
[   31.465857][ T3798] pgpgout 6283
[   31.469229][ T3798] pgfault 6563
[   31.472606][ T3798] pgmajfault 30
[   31.476084][ T3798] inactive_anon 0
[   31.479705][ T3798] active_anon 20480
[   31.483519][ T3798] inactive_file 0
[   31.487290][ T3798] active_file 98304
[   31.491107][ T3798] unevictable 0
[   31.494626][ T3798] hierarchical_memory_limit 314572800
[   31.500031][ T3798] hierarchical_memsw_limit 9223372036854771712
[   31.506245][ T3798] total_cache 98304
[   31.510051][ T3798] total_rss 36864
[   31.513691][ T3798] total_shmem 0
[   31.517300][ T3798] total_mapped_file 86016
[   31.521628][ T3798] total_dirty 98304
[   31.525480][ T3798] total_writeback 0
[   31.529296][ T3798] total_workingset_refault_anon 65
[   31.534405][ T3798] total_workingset_refault_file 31
[   31.539547][ T3798] total_swap 409600
[   31.543499][ T3798] total_swapcached 49152
[   31.547790][ T3798] total_pgpgin 6320
[   31.551692][ T3798] total_pgpgout 6283
[   31.555622][ T3798] total_pgfault 6563
[   31.559575][ T3798] total_pgmajfault 30
[   31.563563][ T3798] total_inactive_anon 0
[   31.567839][ T3798] total_active_anon 20480
[   31.572207][ T3798] total_inactive_file 0
[   31.576454][ T3798] total_active_file 98304
[   31.580929][ T3798] total_unevictable 0
[   31.584940][ T3798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.39,pid=3797,uid=0
[   31.599444][ T3798] Memory cgroup out of memory: Killed process 3797 (syz.4.39) total-vm:89152kB, anon-rss:740kB, file-rss:16092kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000
[   31.666512][ T3801] loop2: detected capacity change from 0 to 128
[   31.693567][ T3825] __nla_validate_parse: 2 callbacks suppressed
[   31.693580][ T3825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.50'.
[   31.722881][   T29] kauditd_printk_skb: 249 callbacks suppressed
[   31.722896][   T29] audit: type=1400 audit(1726751717.435:361): avc:  denied  { mount } for  pid=3800 comm="syz.2.40" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   31.762841][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1
[   31.770282][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.777741][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.785147][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.792518][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.799919][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.807559][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4
[   31.815180][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.822734][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2
[   31.830295][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.837704][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.845248][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.852746][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.860521][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4
[   31.868566][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.876067][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.883561][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.891053][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.898725][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.906174][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.906215][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.906237][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.928359][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.935774][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.935798][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.950788][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.950862][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.950882][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.950904][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.950926][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.950948][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.950972][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.951038][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.951137][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.951162][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.951185][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.951208][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.951269][   T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   31.955540][   T35] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   32.009484][ T3798] syz.4.39 (3798) used greatest stack depth: 7328 bytes left
[   32.041784][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.084254][   T29] audit: type=1400 audit(1726751717.795:362): avc:  denied  { read } for  pid=3832 comm="syz.4.53" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   32.084352][   T29] audit: type=1400 audit(1726751717.795:363): avc:  denied  { open } for  pid=3832 comm="syz.4.53" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   32.195283][ T3835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'.
[   32.232296][ T3831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.54'.
[   32.260161][ T3837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.55'.
[   32.285379][   T29] audit: type=1400 audit(1726751717.995:364): avc:  denied  { ioctl } for  pid=3832 comm="syz.4.53" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.286431][ T3833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.321354][ T3833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.390936][   T29] audit: type=1400 audit(1726751718.105:365): avc:  denied  { setopt } for  pid=3842 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   32.418950][   T29] audit: type=1400 audit(1726751718.135:366): avc:  denied  { ioctl } for  pid=3842 comm="syz.0.58" path="socket:[3004]" dev="sockfs" ino=3004 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   32.490799][   T29] audit: type=1400 audit(1726751718.205:367): avc:  denied  { unmount } for  pid=3266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   32.561698][ T3849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'.
[   32.647928][ T3851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'.
[   32.658888][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'.
[   32.789574][ T3853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.62'.
[   33.271403][ T3860] loop2: detected capacity change from 0 to 512
[   33.343144][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1
[   33.350595][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.358057][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.365568][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.372965][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.380412][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.387878][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4
[   33.395297][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.402774][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2
[   33.410176][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.417593][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.425093][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.432486][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.439886][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4
[   33.447351][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.454773][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.462210][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.465806][ T3866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'.
[   33.469606][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.485995][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.493391][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.499025][ T3866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.67'.
[   33.500869][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.500893][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.524475][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.524498][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.524518][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.524539][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.554439][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.561878][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.569373][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.576869][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.584314][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.585195][ T3860] EXT4-fs: Ignoring removed nobh option
[   33.591714][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.591792][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.591814][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.591835][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.627117][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.627142][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.641909][ T3861] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   33.643745][ T3861] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   33.681247][ T3873] loop0: detected capacity change from 0 to 128
[   33.689680][   T29] audit: type=1400 audit(1726751719.405:368): avc:  denied  { mount } for  pid=3872 comm="syz.0.71" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   33.689905][ T3860] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.735683][ T3860] EXT4-fs (loop2): 1 truncate cleaned up
[   33.736105][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.881537][ T3886] loop0: detected capacity change from 0 to 512
[   33.888168][ T3886] EXT4-fs: Ignoring removed i_version option
[   33.906311][ T3886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.921519][ T3886] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.955291][ T3272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.122990][ T3859] syz.2.64 (3859) used greatest stack depth: 7224 bytes left
[   34.134690][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.171455][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1
[   34.179046][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186516][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186540][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186568][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186588][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186610][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4
[   34.186633][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186656][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2
[   34.186718][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186744][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186768][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186791][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186815][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4
[   34.186839][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.186863][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.290484][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.290511][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.305320][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.312712][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.312741][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.312842][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.334891][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.342370][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.342393][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.342417][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.342439][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.342458][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.342491][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.342512][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.342536][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.401524][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.408972][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.408997][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.409017][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.409037][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.409059][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.409083][ T3861] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   34.412468][ T3861] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   34.481314][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1
[   34.488975][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.496382][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.503769][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.511228][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.518655][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.526117][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4
[   34.533562][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.540988][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2
[   34.541092][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.555850][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.563259][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.563282][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.563302][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4
[   34.563321][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.575934][ T3910] can0: slcan on ttyS3.
[   34.578122][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.604608][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.604635][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.604726][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.604746][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.604767][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.604789][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.604811][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.604937][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.650714][   T29] audit: type=1400 audit(1726751720.365:369): avc:  denied  { read } for  pid=3002 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   34.657135][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.657161][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.679711][   T29] audit: type=1400 audit(1726751720.385:370): avc:  denied  { search } for  pid=3002 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.685596][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.729538][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.729562][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.729603][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.729628][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.729651][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.729672][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.729694][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.781471][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.781497][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.781521][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.781542][ T3861] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   34.826079][ T3861] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   34.926015][ T3906] can0 (unregistered): slcan off ttyS3.
[   35.030488][ T3950] loop0: detected capacity change from 0 to 512
[   35.042353][ T3951] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[   35.053508][ T3950] EXT4-fs: Ignoring removed nobh option
[   35.061934][ T3950] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   35.082391][ T3950] EXT4-fs (loop0): 1 truncate cleaned up
[   35.097478][ T3950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.138135][ T3953] loop3: detected capacity change from 0 to 8192
[   35.183255][ T3936] loop4: detected capacity change from 0 to 8192
[   35.245235][ T3936]  loop4: p1 p4
[   35.249546][ T3936] loop4: p4 start 50689 is beyond EOD, truncated
[   35.365222][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1
[   35.372667][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.380124][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.387563][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.395001][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.402386][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.409806][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4
[   35.417284][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.424791][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2
[   35.432303][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.439716][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.447278][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.454960][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.462470][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4
[   35.469886][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.477366][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.484848][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.492266][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.499788][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.507240][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.514644][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522113][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522222][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522248][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522274][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522299][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522325][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522349][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522425][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522448][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522474][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522499][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522522][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522545][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522642][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522667][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522692][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.522717][ T3861] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   35.579925][ T3861] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   35.704473][ T3948] syz.0.90 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[   35.718437][ T3948] CPU: 1 UID: 0 PID: 3948 Comm: syz.0.90 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[   35.728601][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   35.738786][ T3948] Call Trace:
[   35.742124][ T3948]  <TASK>
[   35.745057][ T3948]  dump_stack_lvl+0xf2/0x150
[   35.749731][ T3948]  dump_stack+0x15/0x20
[   35.753947][ T3948]  dump_header+0x83/0x2d0
[   35.758274][ T3948]  oom_kill_process+0x341/0x4c0
[   35.763127][ T3948]  out_of_memory+0x9af/0xbe0
[   35.767763][ T3948]  ? __rcu_read_unlock+0x4e/0x70
[   35.772856][ T3948]  mem_cgroup_out_of_memory+0x13e/0x190
[   35.778448][ T3948]  try_charge_memcg+0x51b/0x810
[   35.783444][ T3948]  obj_cgroup_charge_pages+0xbd/0x1a0
[   35.788986][ T3948]  __memcg_kmem_charge_page+0x9d/0x170
[   35.794450][ T3948]  __alloc_pages_noprof+0x1bc/0x360
[   35.800165][ T3948]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   35.805604][ T3948]  alloc_pages_noprof+0xe1/0x100
[   35.810555][ T3948]  __vmalloc_node_range_noprof+0x736/0xec0
[   35.816411][ T3948]  __kvmalloc_node_noprof+0x121/0x170
[   35.821784][ T3948]  ? ip_set_alloc+0x1f/0x30
[   35.826280][ T3948]  ip_set_alloc+0x1f/0x30
[   35.830624][ T3948]  hash_netiface_create+0x273/0x730
[   35.835859][ T3948]  ? __nla_parse+0x40/0x60
[   35.840317][ T3948]  ? __pfx_hash_netiface_create+0x10/0x10
[   35.846139][ T3948]  ip_set_create+0x359/0x8a0
[   35.850746][ T3948]  ? strnstr+0xf1/0x100
[   35.854988][ T3948]  ? __nla_parse+0x40/0x60
[   35.859407][ T3948]  nfnetlink_rcv_msg+0x4a9/0x570
[   35.864378][ T3948]  netlink_rcv_skb+0x12c/0x230
[   35.869231][ T3948]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   35.874698][ T3948]  nfnetlink_rcv+0x16c/0x15c0
[   35.879485][ T3948]  ? kmem_cache_free+0xdd/0x2d0
[   35.884423][ T3948]  ? nlmon_xmit+0x51/0x60
[   35.888860][ T3948]  ? __kfree_skb+0x102/0x150
[   35.893507][ T3948]  ? consume_skb+0x49/0x160
[   35.898789][ T3948]  ? nlmon_xmit+0x51/0x60
[   35.903161][ T3948]  ? dev_hard_start_xmit+0x3c1/0x3f0
[   35.908753][ T3948]  ? __dev_queue_xmit+0xb8a/0x1fe0
[   35.913970][ T3948]  ? ref_tracker_free+0x3a5/0x410
[   35.919031][ T3948]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   35.925142][ T3948]  ? __dev_queue_xmit+0x161/0x1fe0
[   35.930613][ T3948]  ? __netlink_deliver_tap+0x495/0x4c0
[   35.936298][ T3948]  netlink_unicast+0x599/0x670
[   35.941189][ T3948]  netlink_sendmsg+0x5cc/0x6e0
[   35.946045][ T3948]  ? __pfx_netlink_sendmsg+0x10/0x10
[   35.951345][ T3948]  __sock_sendmsg+0x140/0x180
[   35.956031][ T3948]  ____sys_sendmsg+0x312/0x410
[   35.960841][ T3948]  __sys_sendmsg+0x1dd/0x270
[   35.965500][ T3948]  ? futex_wait+0x18e/0x1c0
[   35.970013][ T3948]  __x64_sys_sendmsg+0x46/0x50
[   35.974801][ T3948]  x64_sys_call+0x2689/0x2d60
[   35.979545][ T3948]  do_syscall_64+0xc9/0x1c0
[   35.984137][ T3948]  ? clear_bhb_loop+0x55/0xb0
[   35.989191][ T3948]  ? clear_bhb_loop+0x55/0xb0
[   35.993941][ T3948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.999915][ T3948] RIP: 0033:0x7f012030def9
[   36.004321][ T3948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.023923][ T3948] RSP: 002b:00007f011ef81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   36.032384][ T3948] RAX: ffffffffffffffda RBX: 00007f01204c5f80 RCX: 00007f012030def9
[   36.040386][ T3948] RDX: 1da18f8a264830ea RSI: 0000000020000040 RDI: 0000000000000003
[   36.048359][ T3948] RBP: 00007f0120380b76 R08: 0000000000000000 R09: 0000000000000000
[   36.056499][ T3948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.064472][ T3948] R13: 0000000000000000 R14: 00007f01204c5f80 R15: 00007ffcc76e3c08
[   36.072456][ T3948]  </TASK>
[   36.075634][ T3948] memory: usage 307200kB, limit 307200kB, failcnt 171
[   36.082584][ T3948] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0
[   36.090649][ T3948] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0
[   36.097949][ T3948] Memory cgroup stats for /syz0:
[   36.099842][ T3948] cache 118784
[   36.108196][ T3948] rss 0
[   36.110962][ T3948] shmem 0
[   36.113983][ T3948] mapped_file 106496
[   36.117979][ T3948] dirty 118784
[   36.121392][ T3948] writeback 0
[   36.121401][ T3948] workingset_refault_anon 51
[   36.129407][ T3948] workingset_refault_file 16
[   36.129416][ T3948] swap 454656
[   36.129494][ T3948] swapcached 8192
[   36.141016][ T3948] pgpgin 8000
[   36.141024][ T3948] pgpgout 7969
[   36.141030][ T3948] pgfault 10217
[   36.141084][ T3948] pgmajfault 29
[   36.154759][ T3948] inactive_anon 0
[   36.154768][ T3948] active_anon 8192
[   36.162142][ T3948] inactive_file 0
[   36.165877][ T3948] active_file 118784
[   36.169796][ T3948] unevictable 0
[   36.173345][ T3948] hierarchical_memory_limit 314572800
[   36.178754][ T3948] hierarchical_memsw_limit 9223372036854771712
[   36.185194][ T3948] total_cache 118784
[   36.189077][ T3948] total_rss 0
[   36.192341][ T3948] total_shmem 0
[   36.195861][ T3948] total_mapped_file 106496
[   36.200279][ T3948] total_dirty 118784
[   36.204153][ T3948] total_writeback 0
[   36.208030][ T3948] total_workingset_refault_anon 51
[   36.213170][ T3948] total_workingset_refault_file 16
[   36.218409][ T3948] total_swap 454656
[   36.222257][ T3948] total_swapcached 8192
[   36.226409][ T3948] total_pgpgin 8079
[   36.230236][ T3948] total_pgpgout 8048
[   36.234126][ T3948] total_pgfault 10295
[   36.238156][ T3948] total_pgmajfault 29
[   36.242195][ T3948] total_inactive_anon 0
[   36.246478][ T3948] total_active_anon 8192
[   36.251324][ T3948] total_inactive_file 0
[   36.255519][ T3948] total_active_file 118784
[   36.259950][ T3948] total_unevictable 0
[   36.263906][ T3948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.90,pid=3947,uid=0
[   36.278450][ T3948] Memory cgroup out of memory: Killed process 3947 (syz.0.90) total-vm:89152kB, anon-rss:740kB, file-rss:16092kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[   36.332192][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1
[   36.339666][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.347148][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.354552][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.361969][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.369556][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.377019][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4
[   36.384413][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.391940][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2
[   36.391965][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.391989][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.392013][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.392034][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.392055][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4
[   36.392074][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.392099][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.392123][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.392152][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.392172][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.392193][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481158][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481186][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481206][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481225][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481276][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481301][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481324][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481348][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481446][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481470][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481528][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481551][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481571][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481598][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481622][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481704][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481724][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.481782][ T3338] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   36.487491][ T3338] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   36.664792][ T3978] serio: Serial port ptm0
[   36.684017][ T3948] syz.0.90 (3948) used greatest stack depth: 6384 bytes left
[   36.700319][ T3272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.715945][ T3981] __nla_validate_parse: 21 callbacks suppressed
[   36.715960][ T3981] netlink: 184 bytes leftover after parsing attributes in process `syz.4.102'.
[   36.731963][   T29] kauditd_printk_skb: 65 callbacks suppressed
[   36.731972][   T29] audit: type=1400 audit(1726751722.445:436): avc:  denied  { ioctl } for  pid=3977 comm="syz.4.102" path="socket:[4263]" dev="sockfs" ino=4263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   36.789745][ T3987] netlink: 44 bytes leftover after parsing attributes in process `syz.4.105'.
[   36.811624][   T29] audit: type=1400 audit(1726751722.525:437): avc:  denied  { create } for  pid=3988 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   36.832019][   T29] audit: type=1400 audit(1726751722.525:438): avc:  denied  { bind } for  pid=3988 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   36.851946][   T29] audit: type=1400 audit(1726751722.525:439): avc:  denied  { connect } for  pid=3988 comm="syz.4.106" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   36.872560][   T29] audit: type=1400 audit(1726751722.525:440): avc:  denied  { write } for  pid=3988 comm="syz.4.106" name="event2" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   36.895762][   T29] audit: type=1400 audit(1726751722.525:441): avc:  denied  { open } for  pid=3988 comm="syz.4.106" path="/dev/input/event2" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   36.919803][   T29] audit: type=1400 audit(1726751722.525:442): avc:  denied  { module_request } for  pid=3988 comm="syz.4.106" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   37.238248][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1
[   37.245729][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.253147][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.260629][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.268033][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.275477][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.283064][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4
[   37.290464][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.297890][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2
[   37.305385][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.312763][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.320210][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.327790][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.335192][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4
[   37.342584][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.350680][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.358136][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.365567][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.372947][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.380414][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.387821][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.395217][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.402758][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.410636][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.418151][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.425556][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.432917][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.440322][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.447911][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.455354][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.462744][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.470264][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.477658][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.485193][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.492607][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.500020][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.507549][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.514965][ T3861] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   37.527081][ T3998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.109'.
[   37.533609][ T3861] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   37.567667][ T4000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'.
[   37.576811][ T4000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   37.593365][ T4004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.112'.
[   37.618543][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1
[   37.626150][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.633579][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.641112][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.648635][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.656070][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.663545][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x4
[   37.671020][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.678536][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2
[   37.685983][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.689706][ T4012] loop3: detected capacity change from 0 to 512
[   37.693394][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.707152][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.714654][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.722071][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x4
[   37.722524][ T4012] EXT4-fs: Ignoring removed nobh option
[   37.729474][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.729499][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.729526][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.750467][ T4012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   37.757260][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.757287][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.757308][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.757376][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797438][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797523][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797548][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797569][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797588][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797685][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797709][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797734][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797758][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797824][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797848][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797872][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797902][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797923][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797943][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797964][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.797986][ T3861] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   37.834056][ T4012] EXT4-fs (loop3): 1 truncate cleaned up
[   37.834427][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.874856][ T3861] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   38.213552][ T4010] ==================================================================
[   38.221663][ T4010] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter
[   38.221837][ T4011] syz.3.115 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[   38.229051][ T4010] 
[   38.229057][ T4010] read-write to 0xffff888112c49e68 of 4 bytes by task 4011 on cpu 0:
[   38.229073][ T4010]  mem_cgroup_iter+0x28e/0x380
[   38.229098][ T4010]  shrink_node+0x74a/0x1d40
[   38.243087][ T4011] CPU: 0 UID: 0 PID: 4011 Comm: syz.3.115 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[   38.245359][ T4010]  do_try_to_free_pages+0x3c6/0xc50
[   38.253402][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   38.258131][ T4010]  try_to_free_mem_cgroup_pages+0x1f3/0x4f0
[   38.262607][ T4011] Call Trace:
[   38.262615][ T4011]  <TASK>
[   38.272807][ T4010]  try_charge_memcg+0x2bc/0x810
[   38.278007][ T4011]  dump_stack_lvl+0xf2/0x150
[   38.288034][ T4010]  obj_cgroup_charge_pages+0xbd/0x1a0
[   38.293906][ T4011]  dump_stack+0x15/0x20
[   38.297157][ T4010]  __memcg_kmem_charge_page+0x9d/0x170
[   38.300065][ T4011]  dump_header+0x83/0x2d0
[   38.304968][ T4010]  __alloc_pages_noprof+0x1bc/0x360
[   38.309539][ T4011]  oom_kill_process+0x341/0x4c0
[   38.314884][ T4010]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   38.319011][ T4011]  out_of_memory+0x9af/0xbe0
[   38.324454][ T4010]  alloc_pages_noprof+0xe1/0x100
[   38.328756][ T4011]  ? __rcu_read_unlock+0x4e/0x70
[   38.333924][ T4010]  __vmalloc_node_range_noprof+0x736/0xec0
[   38.333943][ T4010]  __kvmalloc_node_noprof+0x121/0x170
[   38.333968][ T4010]  ip_set_alloc+0x1f/0x30
[   38.333982][ T4010]  hash_netiface_create+0x273/0x730
[   38.333998][ T4010]  ip_set_create+0x359/0x8a0
[   38.338820][ T4011]  mem_cgroup_out_of_memory+0x13e/0x190
[   38.344158][ T4010]  nfnetlink_rcv_msg+0x4a9/0x570
[   38.348722][ T4011]  try_charge_memcg+0x51b/0x810
[   38.353632][ T4010]  netlink_rcv_skb+0x12c/0x230
[   38.358545][ T4011]  obj_cgroup_charge_pages+0xbd/0x1a0
[   38.364317][ T4010]  nfnetlink_rcv+0x16c/0x15c0
[   38.369749][ T4011]  __memcg_kmem_charge_page+0x9d/0x170
[   38.374045][ T4010]  netlink_unicast+0x599/0x670
[   38.379212][ T4011]  __alloc_pages_noprof+0x1bc/0x360
[   38.383765][ T4010]  netlink_sendmsg+0x5cc/0x6e0
[   38.389290][ T4011]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   38.394200][ T4010]  __sock_sendmsg+0x140/0x180
[   38.399021][ T4011]  alloc_pages_noprof+0xe1/0x100
[   38.403748][ T4010]  ____sys_sendmsg+0x312/0x410
[   38.409101][ T4011]  __vmalloc_node_range_noprof+0x736/0xec0
[   38.413746][ T4010]  __sys_sendmsg+0x1dd/0x270
[   38.419201][ T4011]  __kvmalloc_node_noprof+0x121/0x170
[   38.424027][ T4010]  __x64_sys_sendmsg+0x46/0x50
[   38.429212][ T4011]  ? ip_set_alloc+0x1f/0x30
[   38.434160][ T4010]  x64_sys_call+0x2689/0x2d60
[   38.439509][ T4011]  ip_set_alloc+0x1f/0x30
[   38.444163][ T4010]  do_syscall_64+0xc9/0x1c0
[   38.449101][ T4011]  hash_netiface_create+0x273/0x730
[   38.453829][ T4010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.459695][ T4011]  ? __nla_parse+0x40/0x60
[   38.464251][ T4010] 
[   38.464257][ T4010] read to 0xffff888112c49e68 of 4 bytes by task 4010 on cpu 1:
[   38.469591][ T4011]  ? __pfx_hash_netiface_create+0x10/0x10
[   38.474322][ T4010]  mem_cgroup_iter+0xba/0x380
[   38.478818][ T4011]  ip_set_create+0x359/0x8a0
[   38.483570][ T4010]  shrink_node+0x458/0x1d40
[   38.487889][ T4011]  ? strnstr+0xf1/0x100
[   38.492360][ T4010]  do_try_to_free_pages+0x3c6/0xc50
[   38.497542][ T4011]  ? __nla_parse+0x40/0x60
[   38.503399][ T4010]  try_to_free_mem_cgroup_pages+0x1f3/0x4f0
[   38.507788][ T4011]  nfnetlink_rcv_msg+0x4a9/0x570
[   38.510085][ T4010]  try_charge_memcg+0x2bc/0x810
[   38.517608][ T4011]  netlink_rcv_skb+0x12c/0x230
[   38.523282][ T4010]  mem_cgroup_swapin_charge_folio+0x107/0x1a0
[   38.527929][ T4011]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   38.532514][ T4010]  __read_swap_cache_async+0x2b7/0x520
[   38.536992][ T4011]  nfnetlink_rcv+0x16c/0x15c0
[   38.541110][ T4010]  swap_cluster_readahead+0x276/0x3f0
[   38.546325][ T4011]  ? kmem_cache_free+0xdd/0x2d0
[   38.550720][ T4010]  swapin_readahead+0xe4/0x760
[   38.550742][ T4010]  do_swap_page+0x3da/0x1ef0
[   38.550759][ T4010]  handle_mm_fault+0x8c5/0x2a40
[   38.556639][ T4011]  ? nlmon_xmit+0x51/0x60
[   38.561558][ T4010]  exc_page_fault+0x3b9/0x650
[   38.566387][ T4011]  ? __kfree_skb+0x102/0x150
[   38.571123][ T4010]  asm_exc_page_fault+0x26/0x30
[   38.577164][ T4011]  ? consume_skb+0x49/0x160
[   38.582597][ T4010] 
[   38.582601][ T4010] value changed: 0x0000026b -> 0x0000026e
[   38.588111][ T4011]  ? nlmon_xmit+0x51/0x60
[   38.592756][ T4010] 
[   38.592760][ T4010] Reported by Kernel Concurrency Sanitizer on:
[   38.598095][ T4011]  ? dev_hard_start_xmit+0x3c1/0x3f0
[   38.602912][ T4010] CPU: 1 UID: 0 PID: 4010 Comm: syz.3.115 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[   38.607647][ T4011]  ? __dev_queue_xmit+0xb8a/0x1fe0
[   38.612205][ T4010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   38.617024][ T4011]  ? ref_tracker_free+0x3a5/0x410
[   38.621317][ T4010] ==================================================================
[   38.625964][ T4011]  ? __dev_queue_xmit+0x161/0x1fe0
[   38.711121][ T4011]  ? __netlink_deliver_tap+0x495/0x4c0
[   38.716616][ T4011]  netlink_unicast+0x599/0x670
[   38.721381][ T4011]  netlink_sendmsg+0x5cc/0x6e0
[   38.726160][ T4011]  ? __pfx_netlink_sendmsg+0x10/0x10
[   38.731554][ T4011]  __sock_sendmsg+0x140/0x180
[   38.736280][ T4011]  ____sys_sendmsg+0x312/0x410
[   38.741069][ T4011]  __sys_sendmsg+0x1dd/0x270
[   38.745716][ T4011]  ? futex_wait+0x18e/0x1c0
[   38.750266][ T4011]  __x64_sys_sendmsg+0x46/0x50
[   38.755060][ T4011]  x64_sys_call+0x2689/0x2d60
[   38.759895][ T4011]  do_syscall_64+0xc9/0x1c0
[   38.764608][ T4011]  ? clear_bhb_loop+0x55/0xb0
[   38.769374][ T4011]  ? clear_bhb_loop+0x55/0xb0
[   38.774115][ T4011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.780079][ T4011] RIP: 0033:0x7f32064ddef9
[   38.784481][ T4011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.804093][ T4011] RSP: 002b:00007f3205157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   38.812512][ T4011] RAX: ffffffffffffffda RBX: 00007f3206695f80 RCX: 00007f32064ddef9
[   38.820485][ T4011] RDX: 1da18f8a264830ea RSI: 0000000020000040 RDI: 0000000000000003
[   38.828491][ T4011] RBP: 00007f3206550b76 R08: 0000000000000000 R09: 0000000000000000
[   38.836487][ T4011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   38.844446][ T4011] R13: 0000000000000000 R14: 00007f3206695f80 R15: 00007ffc7c467428
[   38.852413][ T4011]  </TASK>
[   38.856607][ T4011] memory: usage 307200kB, limit 307200kB, failcnt 200
[   38.864038][ T4011] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0
[   38.871987][ T4011] kmem: usage 307092kB, limit 9007199254740988kB, failcnt 0
[   38.879395][ T4011] Memory cgroup stats for /syz3:
[   38.888693][ T4011] cache 94208
[   38.897081][ T4011] rss 0
[   38.899942][ T4011] shmem 0
[   38.902867][ T4011] mapped_file 69632
[   38.906742][ T4011] dirty 94208
[   38.910047][ T4011] writeback 0
[   38.913361][ T4011] workingset_refault_anon 40
[   38.917981][ T4011] workingset_refault_file 15
[   38.922607][ T4011] swap 450560
[   38.925930][ T4011] swapcached 8192
[   38.929553][ T4011] pgpgin 6129
[   38.932852][ T4011] pgpgout 6104
[   38.936234][ T4011] pgfault 7492
[   38.939675][ T4011] pgmajfault 14
[   38.943167][ T4011] inactive_anon 0
[   38.946885][ T4011] active_anon 8192
[   38.950600][ T4011] inactive_file 0
[   38.954291][ T4011] active_file 94208
[   38.958114][ T4011] unevictable 0
[   38.961625][ T4011] hierarchical_memory_limit 314572800
[   38.967000][ T4011] hierarchical_memsw_limit 9223372036854771712
[   38.973164][ T4011] total_cache 94208
[   38.976984][ T4011] total_rss 0
[   38.980296][ T4011] total_shmem 0
[   38.983804][ T4011] total_mapped_file 69632
[   38.988226][ T4011] total_dirty 94208
[   38.992028][ T4011] total_writeback 0
[   38.995887][ T4011] total_workingset_refault_anon 40
[   39.001003][ T4011] total_workingset_refault_file 15
[   39.006127][ T4011] total_swap 450560
[   39.009926][ T4011] total_swapcached 8192
[   39.014064][ T4011] total_pgpgin 6129
[   39.017911][ T4011] total_pgpgout 6104
[   39.021808][ T4011] total_pgfault 7497
[   39.025708][ T4011] total_pgmajfault 14
[   39.029696][ T4011] total_inactive_anon 0
[   39.033902][ T4011] total_active_anon 8192
[   39.038203][ T4011] total_inactive_file 0
[   39.042410][ T4011] total_active_file 94208
[   39.046779][ T4011] total_unevictable 0
[   39.050788][ T4011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.115,pid=4010,uid=0
[   39.065365][ T4011] Memory cgroup out of memory: Killed process 4010 (syz.3.115) total-vm:89152kB, anon-rss:612kB, file-rss:16096kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[   39.241504][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.