last executing test programs:

6.721001473s ago: executing program 4 (id=5):
socket$netlink(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x70060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0xecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140))

5.773593067s ago: executing program 4 (id=15):
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
unshare(0x2c020400)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x1, 0x0, 0xf8c7}})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x10a5840, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23f, &(0x7f0000000a80)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40e8662e, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, './file1\x00'}})
sendfile(r0, r1, 0x0, 0xffffffff000)

5.627198161s ago: executing program 0 (id=18):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x800, 0x1, 0x9, 0x6, 0x3ff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket(0x1, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r2, 0x407, 0x100004)
write$eventfd(r2, &(0x7f0000000240), 0xffffff14)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0)
io_setup(0x3, &(0x7f00000003c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, 0x0})

4.614664396s ago: executing program 1 (id=24):
socket(0xa, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0, 0x1020}], 0x1, 0x5)
r1 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x1, 0x0)
write$fault_inject(r1, 0x0, 0x41)
socket$kcm(0xa, 0x1, 0x106)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
unshare(0x46040600)
r4 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x1aa0e2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0x4c, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbfa, {}, [@NFC_ATTR_SE_INDEX={0x0, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004045}, 0x20004805)
pwrite64(r4, 0x0, 0x0, 0x1ff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r8)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r9, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r11}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.605624116s ago: executing program 0 (id=25):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r4, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000000c0)=""/58, 0x3a)
r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0xfebc)
mq_open(&(0x7f0000000100)='!\xd5\\@]++**\x00', 0x40, 0x40, &(0x7f0000000140)={0x8, 0x0, 0xfffe0000000, 0xc})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300004f3c492ced00000000140012000b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r9 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x200040c4)
ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, 0x0)

4.285415894s ago: executing program 1 (id=28):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r4, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000000c0)=""/58, 0x3a)
r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0xfebc)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300004f3c492ced00000000140012000b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r9 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x200040c4)
ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, 0x0)

4.199695036s ago: executing program 4 (id=29):
socket$nl_netfilter(0x10, 0x3, 0xc)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
lseek(r1, 0x2000, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00'})
openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x44)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9fcc}, 0x94)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
sendto$inet6(r2, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0)
writev(r2, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1)

2.807917101s ago: executing program 4 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:'], 0x5d)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), 0xffffffffffffffff)
r2 = socket$kcm(0x1e, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1)
write(r3, &(0x7f00000000c0)='10 1 0\x00', 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001c0004000000000000000002e0000002000000000000000000000000e8001100"], 0x154}}, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x3, 0x0, 0xd89631e63750130c}})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000580)={<r8=>0x0, 0x2, 0xff}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000007c0)={r8, @in={{0x2, 0x4e22, @loopback}}, [0x3, 0x2, 0x7, 0x2, 0x1ff, 0x2, 0x4, 0xffffffff, 0x3, 0x6, 0x2, 0x1, 0x1, 0x9072, 0x1800000]}, &(0x7f00000008c0)=0x100)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x80000000}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040)
rt_tgsigqueueinfo(0x0, 0x0, 0x36, &(0x7f0000000500)={0x10, 0x2, 0x6})
ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0)

2.742750652s ago: executing program 3 (id=32):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000004d40)}, 0x4}], 0x1, 0x10022, 0x0)

2.690915874s ago: executing program 0 (id=33):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="644124bd7000fddbdf25150000ea090001001bed68a5901dd40e0800003ab95d1eec55f01a6cae65a50007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4001004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004c80), r5)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
bind$inet(r7, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$inet_opts(r8, 0x0, 0x9, 0x0, &(0x7f0000000200))
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x60, r6, 0x1, 0x70bd26, 0x25dfd3fe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:sshd_key_t:s0\x00'}]}, 0x60}}, 0x4080)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xd8, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:textrel_shlib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'u:object_r:app_data_file:s0:c512,c768\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000900}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

2.658864624s ago: executing program 0 (id=34):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r4, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f00000000c0)=""/58, 0x3a)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0xfebc)
mq_open(&(0x7f0000000100)='!\xd5\\@]++**\x00', 0x40, 0x40, &(0x7f0000000140)={0x8, 0x0, 0xfffe0000000, 0xc})
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300004f3c492ced00000000140012000b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x200040c4)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, 0x0)

2.655672304s ago: executing program 3 (id=35):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000004d40)}, 0x4}], 0x1, 0x10022, 0x0)

2.524912147s ago: executing program 3 (id=37):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r4, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f00000000c0)=""/58, 0x3a)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0xfebc)
mq_open(&(0x7f0000000100)='!\xd5\\@]++**\x00', 0x40, 0x40, &(0x7f0000000140)={0x8, 0x0, 0xfffe0000000, 0xc})
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300004f3c492ced00000000140012000b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x200040c4)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, 0x0)

2.464500469s ago: executing program 1 (id=38):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x30000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000003fffffdfc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, r3, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a4d175af}, 0x40)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000000d00)="$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")
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

2.340624082s ago: executing program 2 (id=40):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r4, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f00000000c0)=""/58, 0x3a)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0xfebc)
mq_open(&(0x7f0000000100)='!\xd5\\@]++**\x00', 0x40, 0x40, &(0x7f0000000140)={0x8, 0x0, 0xfffe0000000, 0xc})
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300004f3c492ced00000000140012000b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x200040c4)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, 0x0)

1.657184029s ago: executing program 0 (id=41):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004)
recvmmsg(r5, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/209, 0xd1}, {&(0x7f0000004b80)=""/165, 0xa5}, {&(0x7f0000004c40)=""/25, 0x19}, {&(0x7f0000004c80)=""/169, 0xa9}], 0x5}, 0x4}], 0x1, 0x10022, 0x0)

1.424656115s ago: executing program 3 (id=42):
socket(0xa, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0, 0x1020}], 0x1, 0x5)
openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x1, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
unshare(0x46040600)
r3 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x1aa0e2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0x4c, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r5, 0x8, 0x70bd26, 0x25dfdbfa, {}, [@NFC_ATTR_SE_INDEX={0x0, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004045}, 0x20004805)
pwrite64(r3, 0x0, 0x0, 0x1ff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r8)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r9, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r11}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.196878101s ago: executing program 2 (id=43):
syz_open_dev$loop(&(0x7f0000000000), 0xebd, 0x4000)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
setpriority(0x1, 0x0, 0xc84a)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x2cbfb000)
ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
syz_emit_ethernet(0x6a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x34, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x42, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x7, "6a29b40a67"}, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ba885a106943a3de301004248cc11502"}]}}}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'})
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x602400, 0x162)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0xfffffffffffffffd)
bpf$MAP_CREATE(0x0, 0x0, 0x40)

955.634037ms ago: executing program 3 (id=44):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r4, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000000c0)=""/58, 0x3a)
r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0xfebc)
mq_open(&(0x7f0000000100)='!\xd5\\@]++**\x00', 0x40, 0x40, &(0x7f0000000140)={0x8, 0x0, 0xfffe0000000, 0xc})
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300004f3c492ced00000000140012000b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r9 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x200040c4)
ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, 0x0)

911.074998ms ago: executing program 2 (id=45):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x714, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x6e8, 0x2, [@TCA_BPF_ACT={0x6e4, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x80, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa6954"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xbc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x45, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x27c, 0x13, 0x0, 0x0, {{0x7}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xad, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb763cd5f4"}}]}, {0x108, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02fb1d34f0dc8917bc6a1b7ffa0d4bbddada56c96"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x714}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'gre0\x00', 0x4002})
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0xd)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000004003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8008044}, 0x0)
finit_module(r6, &(0x7f0000000080)='\x00', 0x3)
write(r6, &(0x7f0000000300)='call_site.function == vfs_read', 0x1e)

787.006621ms ago: executing program 1 (id=46):
socket(0xa, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0, 0x1020}], 0x1, 0x5)
r1 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x1, 0x0)
write$fault_inject(r1, 0x0, 0x41)
socket$kcm(0xa, 0x1, 0x106)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
unshare(0x46040600)
syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x1aa0e2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0x4c, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r5, 0x8, 0x70bd26, 0x25dfdbfa, {}, [@NFC_ATTR_SE_INDEX={0x0, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004045}, 0x20004805)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r8)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r9, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r11}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

694.324793ms ago: executing program 2 (id=47):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c)
recvfrom$inet_nvme(r0, &(0x7f0000000000)=""/161, 0xa1, 0x2, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'vlan0\x00'}}, 0x80)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20002003})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0x8, 0x2, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0xc9}}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140))
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)

596.368765ms ago: executing program 2 (id=48):
syz_open_dev$loop(&(0x7f0000000000), 0xebd, 0x4000)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
setpriority(0x1, 0x0, 0xc84a)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x2cbfb000)
ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
syz_emit_ethernet(0x6a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x34, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x42, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x7, "6a29b40a67"}, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ba885a106943a3de301004248cc11502"}]}}}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'})
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, &(0x7f0000004180)='./file0\x00', 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001f80)=""/226, 0x0, 0xe2, 0x2, 0x80000000}, 0x28)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="48a0040024000000280012800b00010067656e6576650000180002801400120000000000000000000000ff"], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x602400, 0x162)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0xfffffffffffffffd)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40)

519.727598ms ago: executing program 1 (id=49):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x9}})
setns(0xc9, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r2}}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x109, &(0x7f0000006680))
write(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000002040)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001040)=""/4096, 0x1000, 0x0, 0xa, 0x72, 0x1000, 0x800}}, 0x120)
unshare(0x600)
r4 = epoll_create1(0x80000)
r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0xc0000008})
signalfd4(r5, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x40)
socket$netlink(0x10, 0x3, 0x4)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff0001, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"5fa25c48ed96971221d2718e0c43935e"}, 0xfffffffffffffffb, 0x400, 0xfffffffffffffff6}, @ib={0x1b, 0x1, 0x2, {"15a82a35c72b55077ec82827906f7f19"}, 0x8001, 0x7, 0x4}}}, 0x118)

466.691029ms ago: executing program 2 (id=50):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:'], 0x5d)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), 0xffffffffffffffff)
r1 = socket$kcm(0x1e, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1)
write(r2, &(0x7f00000000c0)='10 1 0\x00', 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001c0004000000000000000002e0000002000000000000000000000000e8001100"], 0x154}}, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x3, 0x0, 0xd89631e63750130c}})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000580)={<r7=>0x0, 0x2, 0xff}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000007c0)={r7, @in={{0x2, 0x4e22, @loopback}}, [0x3, 0x2, 0x7, 0x2, 0x1ff, 0x2, 0x4, 0xffffffff, 0x3, 0x6, 0x2, 0x1, 0x1, 0x9072, 0x1800000]}, &(0x7f00000008c0)=0x100)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x80000000}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040)
rt_tgsigqueueinfo(0x0, 0x0, 0x36, &(0x7f0000000500)={0x10, 0x2, 0x6})
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)

340.775492ms ago: executing program 1 (id=51):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r4, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000000c0)=""/58, 0x3a)
r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0xfebc)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300004f3c492ced00000000140012000b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r9 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x200040c4)
ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, 0x0)

306.103193ms ago: executing program 0 (id=52):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x25dfdbfe, {0x0, 0x0, 0x600, r4, 0x60, 0x2000}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000000c0)=""/58, 0x3a)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mq_open(&(0x7f0000000100)='!\xd5\\@]++**\x00', 0x40, 0x40, &(0x7f0000000140)={0x8, 0x0, 0xfffe0000000, 0xc})
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300004f3c492ced00000000140012000b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x200040c4)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, 0x0)

0s ago: executing program 3 (id=53):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x70, &(0x7f00000017c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x4e, 0x0, @gue={{0x2, 0x0, 0x3, 0x3, 0x100, @val=0x80}, "7a820f503add620b1028fb7e9ca2a64214d060c88cb7fd842a93096e9ae8d7c2cee5ce62af918172a212c636dac265894068ded0e00647dde41988c7504d"}}}}}}, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000000)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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")
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000080)=""/4057, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r5, &(0x7f0000000a00)="c7", 0x1)
shutdown(r4, 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_setup(0x1, &(0x7f0000000b80)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
signalfd4(r2, &(0x7f0000000100)={[0x3]}, 0x8, 0x0)
readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1401, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000845)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e80000001a000105"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.262620][   T28] audit: type=1400 audit(1786170813.183:113): avc:  denied  { noatsecure } for  pid=3268 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.286927][ T3265] sshd-session (3265) used greatest stack depth: 10656 bytes left
[   21.291205][   T28] audit: type=1400 audit(1786170813.183:114): avc:  denied  { write } for  pid=3268 comm="sh" path="pipe:[1548]" dev="pipefs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   21.317089][   T28] audit: type=1400 audit(1786170813.183:115): avc:  denied  { rlimitinh } for  pid=3268 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   21.335864][   T28] audit: type=1400 audit(1786170813.183:116): avc:  denied  { siginh } for  pid=3268 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts.
[   28.918041][   T28] audit: type=1400 audit(1786170820.863:117): avc:  denied  { mounton } for  pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.941660][ T3284] cgroup: Unknown subsys name 'net'
[   28.946889][   T28] audit: type=1400 audit(1786170820.883:118): avc:  denied  { mount } for  pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.969195][   T28] audit: type=1400 audit(1786170820.903:119): avc:  denied  { unmount } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.071560][ T3284] cgroup: Unknown subsys name 'cpuset'
[   29.077555][ T3284] cgroup: Unknown subsys name 'rlimit'
[   29.167302][   T28] audit: type=1400 audit(1786170821.113:120): avc:  denied  { setattr } for  pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.190704][   T28] audit: type=1400 audit(1786170821.113:121): avc:  denied  { create } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   29.211291][   T28] audit: type=1400 audit(1786170821.113:122): avc:  denied  { write } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.224932][ T3289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   29.231793][   T28] audit: type=1400 audit(1786170821.113:123): avc:  denied  { read } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.260657][   T28] audit: type=1400 audit(1786170821.123:124): avc:  denied  { mounton } for  pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   29.263627][ T3284] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.285517][   T28] audit: type=1400 audit(1786170821.123:125): avc:  denied  { mount } for  pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   29.317495][   T28] audit: type=1400 audit(1786170821.133:126): avc:  denied  { read } for  pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   30.510554][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.517780][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.524974][ T3295] bridge_slave_0: entered allmulticast mode
[   30.531287][ T3295] bridge_slave_0: entered promiscuous mode
[   30.557060][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.564223][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.571352][ T3295] bridge_slave_1: entered allmulticast mode
[   30.577818][ T3295] bridge_slave_1: entered promiscuous mode
[   30.592350][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.599408][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.606519][ T3300] bridge_slave_0: entered allmulticast mode
[   30.612753][ T3300] bridge_slave_0: entered promiscuous mode
[   30.631442][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.638704][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.645849][ T3300] bridge_slave_1: entered allmulticast mode
[   30.652284][ T3300] bridge_slave_1: entered promiscuous mode
[   30.664514][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.671597][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.678857][ T3305] bridge_slave_0: entered allmulticast mode
[   30.685203][ T3305] bridge_slave_0: entered promiscuous mode
[   30.703037][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.713123][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.722755][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.729830][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.736951][ T3305] bridge_slave_1: entered allmulticast mode
[   30.743420][ T3305] bridge_slave_1: entered promiscuous mode
[   30.774884][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.785329][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.794664][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.801755][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.808811][ T3296] bridge_slave_0: entered allmulticast mode
[   30.815103][ T3296] bridge_slave_0: entered promiscuous mode
[   30.822274][ T3295] team0: Port device team_slave_0 added
[   30.839318][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.846416][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.853643][ T3296] bridge_slave_1: entered allmulticast mode
[   30.859889][ T3296] bridge_slave_1: entered promiscuous mode
[   30.866993][ T3295] team0: Port device team_slave_1 added
[   30.873714][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.882906][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.889927][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.897063][ T3302] bridge_slave_0: entered allmulticast mode
[   30.903463][ T3302] bridge_slave_0: entered promiscuous mode
[   30.922710][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.935576][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.942638][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.949767][ T3302] bridge_slave_1: entered allmulticast mode
[   30.956352][ T3302] bridge_slave_1: entered promiscuous mode
[   30.963187][ T3300] team0: Port device team_slave_0 added
[   30.985278][ T3300] team0: Port device team_slave_1 added
[   30.996130][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.005535][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.012596][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.038467][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.049911][ T3305] team0: Port device team_slave_0 added
[   31.064394][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.077515][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.084475][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.110431][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.124191][ T3305] team0: Port device team_slave_1 added
[   31.130689][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.139967][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.146991][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.172882][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.188065][ T3296] team0: Port device team_slave_0 added
[   31.195162][ T3296] team0: Port device team_slave_1 added
[   31.205279][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.214571][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.221628][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.247566][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.279072][ T3302] team0: Port device team_slave_0 added
[   31.292554][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.299529][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.325572][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.337234][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.344245][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.370195][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.381697][ T3302] team0: Port device team_slave_1 added
[   31.391574][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.398532][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.424432][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.453578][ T3295] hsr_slave_0: entered promiscuous mode
[   31.459413][ T3295] hsr_slave_1: entered promiscuous mode
[   31.465553][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.472627][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.498599][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.515445][ T3300] hsr_slave_0: entered promiscuous mode
[   31.521469][ T3300] hsr_slave_1: entered promiscuous mode
[   31.527326][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   31.533071][ T3300] Cannot create hsr debugfs directory
[   31.547536][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.554507][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.580452][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.601642][ T3305] hsr_slave_0: entered promiscuous mode
[   31.607647][ T3305] hsr_slave_1: entered promiscuous mode
[   31.613521][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   31.619257][ T3305] Cannot create hsr debugfs directory
[   31.629647][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.636614][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.662582][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.701944][ T3296] hsr_slave_0: entered promiscuous mode
[   31.707865][ T3296] hsr_slave_1: entered promiscuous mode
[   31.713717][ T3296] debugfs: 'hsr0' already exists in 'hsr'
[   31.719439][ T3296] Cannot create hsr debugfs directory
[   31.763130][ T3302] hsr_slave_0: entered promiscuous mode
[   31.769087][ T3302] hsr_slave_1: entered promiscuous mode
[   31.774937][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   31.780750][ T3302] Cannot create hsr debugfs directory
[   31.923677][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.931922][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.939658][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.947950][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.955543][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.963920][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.973772][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.981916][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.001522][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.009841][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.017702][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.026076][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.033624][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.041976][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.050765][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.059689][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.082987][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.091771][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.099768][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.108384][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.116030][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.124445][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.131978][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.140562][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.175966][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.184679][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.192360][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.200811][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.208668][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.216890][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.224892][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.233067][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.269905][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.278548][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.286096][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.294355][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.302085][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.310357][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.318845][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.327254][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.350537][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.373593][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.400850][ T3296] 8021q: adding VLAN 0 to HW filter on device team0
[   32.410809][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.418830][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   32.428573][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.435621][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.446971][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.455566][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.462656][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.475137][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.482264][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.493058][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.500224][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.514901][ T3295] 8021q: adding VLAN 0 to HW filter on device team0
[   32.529905][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   32.542743][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.549851][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.558699][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.565741][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.575475][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.582662][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.601909][  T109] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.608974][  T109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.624624][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.652636][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   32.681511][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.688584][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.705605][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.712704][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.854384][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.888844][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.918418][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.947384][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.982367][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.044982][ T3296] veth0_vlan: entered promiscuous mode
[   33.063060][ T3296] veth1_vlan: entered promiscuous mode
[   33.084408][ T3296] veth0_macvtap: entered promiscuous mode
[   33.110335][ T3296] veth1_macvtap: entered promiscuous mode
[   33.130969][ T3300] veth0_vlan: entered promiscuous mode
[   33.142298][ T3305] veth0_vlan: entered promiscuous mode
[   33.156510][ T3305] veth1_vlan: entered promiscuous mode
[   33.164238][ T3295] veth0_vlan: entered promiscuous mode
[   33.173810][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.182156][ T3300] veth1_vlan: entered promiscuous mode
[   33.190724][ T3302] veth0_vlan: entered promiscuous mode
[   33.203093][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.211685][ T3302] veth1_vlan: entered promiscuous mode
[   33.224449][ T3295] veth1_vlan: entered promiscuous mode
[   33.235648][ T3300] veth0_macvtap: entered promiscuous mode
[   33.247598][ T3305] veth0_macvtap: entered promiscuous mode
[   33.254837][ T3305] veth1_macvtap: entered promiscuous mode
[   33.263441][ T3300] veth1_macvtap: entered promiscuous mode
[   33.280955][ T3302] veth0_macvtap: entered promiscuous mode
[   33.287973][ T3295] veth0_macvtap: entered promiscuous mode
[   33.294999][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.302965][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.312756][ T3302] veth1_macvtap: entered promiscuous mode
[   33.322887][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.331232][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.343880][ T3295] veth1_macvtap: entered promiscuous mode
[   33.351482][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.371944][   T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.382309][ T1623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.393754][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.401539][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.411204][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.421879][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.421995][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.430720][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.458337][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.501107][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.532021][ T1623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.590048][ T3508] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4'.
[   33.625272][ T1667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.647905][ T3510] loop0: detected capacity change from 0 to 512
[   33.665550][ T1667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.679651][ T3510] EXT4-fs: Ignoring removed orlov option
[   33.714333][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   33.746510][ T3510] EXT4-fs warning (device loop0): ext4_multi_mount_protect:287: Invalid MMP block in superblock
[   33.790065][ T3524] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6'.
[   33.874916][ T3529] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7'.
[   33.891274][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.908433][ T3533] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.922456][   T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.951523][ T1623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.960330][   T28] kauditd_printk_skb: 39 callbacks suppressed
[   33.960344][   T28] audit: type=1400 audit(1786170825.903:166): avc:  denied  { firmware_load } for  pid=3509 comm="syz.0.1" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   33.980323][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   34.067315][ T3538] all: renamed from lo (while UP)
[   34.083592][   T28] audit: type=1400 audit(1786170826.033:167): avc:  denied  { ioctl } for  pid=3539 comm="syz.2.11" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.115114][ T3540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11'.
[   34.119057][ T3544] loop3: detected capacity change from 0 to 512
[   34.130940][ T3544] EXT4-fs: Ignoring removed bh option
[   34.146438][ T3533] syz.0.1 (3533) used greatest stack depth: 10456 bytes left
[   34.162537][ T3546] netlink: 'syz.1.12': attribute type 39 has an invalid length.
[   34.175103][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.186366][ T3544] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.10: corrupted in-inode xattr: e_value size too large
[   34.203867][ T3544] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   34.204011][ T3544] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.10: couldn't read orphan inode 15 (err -117)
[   34.213243][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   34.213259][    C0] EXT4-fs (loop3): initial error at time 1786170826: ext4_iget_extra_inode:5180: inode 15
[   34.213286][    C0] EXT4-fs (loop3): last error at time 1786170826: ext4_iget_extra_inode:5180: inode 15
[   34.253699][ T1667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.268277][ T3544] loop3: lost filesystem error report for type 5 error -117
[   34.271901][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.274106][   T28] audit: type=1400 audit(1786170826.213:168): avc:  denied  { read write } for  pid=3545 comm="syz.1.12" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   34.310806][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.324408][   T28] audit: type=1400 audit(1786170826.213:169): avc:  denied  { open } for  pid=3545 comm="syz.1.12" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   34.350221][   T28] audit: type=1400 audit(1786170826.213:170): avc:  denied  { create } for  pid=3545 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   34.353231][ T3558] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13'.
[   34.371026][   T28] audit: type=1400 audit(1786170826.213:171): avc:  denied  { write } for  pid=3545 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   34.381336][ T3538] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   34.400488][   T28] audit: type=1400 audit(1786170826.273:172): avc:  denied  { load_policy } for  pid=3537 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   34.429962][   T28] audit: type=1400 audit(1786170826.373:173): avc:  denied  { tracepoint } for  pid=3537 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   34.452047][ T3544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'.
[   34.457368][ T3538] SELinux: failed to load policy
[   34.465819][   T28] audit: type=1400 audit(1786170826.413:174): avc:  denied  { create } for  pid=3537 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   34.465883][   T28] audit: type=1400 audit(1786170826.413:175): avc:  denied  { write } for  pid=3537 comm="syz.3.10" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   34.510449][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.523730][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.532824][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.654761][  T109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.664210][   T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.673312][   T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.740997][ T3565] loop4: detected capacity change from 0 to 128
[   34.849903][ T3565] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.879747][ T3565] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   34.966767][ T3577] all: renamed from lo (while UP)
[   34.994134][ T3577] SELinux:  policydb string  does not match my string SE Linux
[   35.006313][ T3577] SELinux: failed to load policy
[   35.057897][ T3577] loop2: detected capacity change from 0 to 512
[   35.067973][ T3577] EXT4-fs: Ignoring removed bh option
[   35.072594][ T3575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.085855][ T3575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.103666][ T3577] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.20: corrupted in-inode xattr: e_value size too large
[   35.118569][ T3577] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   35.120668][ T3577] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.20: couldn't read orphan inode 15 (err -117)
[   35.130028][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   35.130056][    C0] EXT4-fs (loop2): initial error at time 1786170827: ext4_iget_extra_inode:5180: inode 15
[   35.130166][    C0] EXT4-fs (loop2): last error at time 1786170827: ext4_iget_extra_inode:5180: inode 15
[   35.169637][ T3577] loop2: lost filesystem error report for type 5 error -117
[   35.172724][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.199910][ T3577] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   35.208595][ T3577] SELinux: failed to load policy
[   35.217566][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.243641][ T3577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'.
[   35.337696][ T3580] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21'.
[   35.358645][ T3560] syz.4.15 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   35.373171][ T3560] CPU: 1 UID: 0 PID: 3560 Comm: syz.4.15 Not tainted syzkaller #0 PREEMPT(lazy) 
[   35.373195][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.373210][ T3560] Call Trace:
[   35.373217][ T3560]  <TASK>
[   35.373224][ T3560]  __dump_stack+0x1d/0x30
[   35.373246][ T3560]  dump_stack_lvl+0x95/0xd0
[   35.373300][ T3560]  dump_stack+0x15/0x1b
[   35.373318][ T3560]  dump_header+0x80/0x240
[   35.373419][ T3560]  oom_kill_process+0x295/0x350
[   35.373449][ T3560]  out_of_memory+0x981/0xbc0
[   35.373477][ T3560]  try_charge_memcg+0x621/0xa00
[   35.373555][ T3560]  __memcg_kmem_charge_page+0x199/0x3a0
[   35.373643][ T3560]  __alloc_frozen_pages_noprof+0x18a/0x350
[   35.373672][ T3560]  alloc_pages_mpol+0xa9/0x1d0
[   35.373697][ T3560]  alloc_pages_noprof+0x8f/0x140
[   35.373732][ T3560]  __vmalloc_node_range_noprof+0xae9/0x11e0
[   35.373763][ T3560]  __kvmalloc_node_noprof+0x3a0/0x590
[   35.373785][ T3560]  ? futex_hash_allocate+0x192/0x920
[   35.373810][ T3560]  ? futex_hash_allocate+0x192/0x920
[   35.373826][ T3560]  ? futex_hash_allocate+0x192/0x920
[   35.373846][ T3560]  futex_hash_allocate+0x192/0x920
[   35.373973][ T3560]  ? cap_task_prctl+0x13f/0x6b0
[   35.373999][ T3560]  futex_hash_prctl+0xd8/0xf0
[   35.374069][ T3560]  __se_sys_prctl+0x4f4/0x13b0
[   35.374098][ T3560]  __x64_sys_prctl+0x67/0x80
[   35.374154][ T3560]  x64_sys_call+0x2533/0x3020
[   35.374178][ T3560]  do_syscall_64+0x136/0x3c0
[   35.374294][ T3560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.374311][ T3560] RIP: 0033:0x7f08a693e0d9
[   35.374325][ T3560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.374342][ T3560] RSP: 002b:00007f08a5397028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[   35.374362][ T3560] RAX: ffffffffffffffda RBX: 00007f08a6bc5fa0 RCX: 00007f08a693e0d9
[   35.374400][ T3560] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[   35.374484][ T3560] RBP: 00007f08a69d5024 R08: 0000000000000000 R09: 0000000000000000
[   35.374498][ T3560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   35.374511][ T3560] R13: 00007f08a6bc6038 R14: 00007f08a6bc5fa0 R15: 00007fff16be0f38
[   35.374527][ T3560]  </TASK>
[   35.374544][ T3560] memory: usage 307200kB, limit 307200kB, failcnt 1097
[   35.602498][ T3560] memory+swap: usage 19368kB, limit 9007199254740988kB, failcnt 0
[   35.610349][ T3560] kmem: usage 2036kB, limit 9007199254740988kB, failcnt 0
[   35.620062][ T3560] Memory cgroup stats for /syz4:
[   35.620424][ T3560] cache 528384
[   35.628978][ T3560] rss 4096
[   35.632209][ T3560] shmem 0
[   35.635154][ T3560] mapped_file 65536
[   35.638967][ T3560] dirty 0
[   35.641924][ T3560] writeback 0
[   35.645212][ T3560] workingset_refault_anon 75
[   35.649833][ T3560] workingset_refault_file 313
[   35.654603][ T3560] swap 17039360
[   35.658090][ T3560] swapcached 17350656
[   35.662173][ T3560] pgpgin 4989
[   35.665443][ T3560] pgpgout 4859
[   35.668798][ T3560] pgfault 4404
[   35.672202][ T3560] pgmajfault 31
[   35.675712][ T3560] inactive_anon 0
[   35.679354][ T3560] active_anon 4096
[   35.683150][ T3560] inactive_file 524288
[   35.687209][ T3560] active_file 4096
[   35.691038][ T3560] unevictable 0
[   35.695129][ T3560] hierarchical_memory_limit 314572800
[   35.701747][ T3560] hierarchical_memsw_limit 9223372036854771712
[   35.708104][ T3560] total_cache 528384
[   35.712256][ T3560] total_rss 4096
[   35.715964][ T3560] total_shmem 0
[   35.719429][ T3560] total_mapped_file 65536
[   35.723946][ T3560] total_dirty 0
[   35.727474][ T3560] total_writeback 0
[   35.731339][ T3560] total_workingset_refault_anon 75
[   35.736492][ T3560] total_workingset_refault_file 313
[   35.741727][ T3560] total_swap 17039360
[   35.745798][ T3560] total_swapcached 17350656
[   35.750427][ T3560] total_pgpgin 4989
[   35.758216][ T3591] all: renamed from lo (while UP)
[   35.763848][ T3560] total_pgpgout 4859
[   35.767757][ T3560] total_pgfault 4404
[   35.773284][ T3560] total_pgmajfault 31
[   35.779866][ T3560] total_inactive_anon 0
[   35.781922][ T3587] process 'syz.3.23' launched '' with NULL argv: empty string added
[   35.792815][ T3560] total_active_anon 4096
[   35.797075][ T3560] total_inactive_file 524288
[   35.811271][ T3560] total_active_file 4096
[   35.813753][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.817742][ T3591] SELinux:  policydb string  does not match my string SE Linux
[   35.834556][ T3560] total_unevictable 0
[   35.841723][ T3591] SELinux: failed to load policy
[   35.842017][ T3560] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.15,pid=3559,uid=0
[   35.921312][ T3591] loop0: detected capacity change from 0 to 512
[   35.936857][ T3591] EXT4-fs: Ignoring removed bh option
[   35.955602][ T3560] Memory cgroup out of memory: Killed process 3559 (syz.4.15) total-vm:96296kB, anon-rss:1240kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000
[   35.988589][ T3559] syz.4.15 (3559) used greatest stack depth: 10352 bytes left
[   35.997323][ T3560] syz.4.15 (3560) used greatest stack depth: 10288 bytes left
[   36.041390][ T3565] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.047131][ T3591] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.25: corrupted in-inode xattr: e_value size too large
[   36.074271][ T3591] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   36.075256][ T3591] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.25: couldn't read orphan inode 15 (err -117)
[   36.084715][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   36.084746][    C0] EXT4-fs (loop0): initial error at time 1786170828: ext4_iget_extra_inode:5180: inode 15
[   36.084827][    C0] EXT4-fs (loop0): last error at time 1786170828: ext4_iget_extra_inode:5180: inode 15
[   36.122944][ T3609] SELinux:  policydb string  does not match my string SE Linux
[   36.125045][ T3591] loop0: lost filesystem error report for type 5 error -117
[   36.137485][ T3591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.309625][ T3610] loop3: detected capacity change from 0 to 1764
[   36.436545][ T3609] SELinux: failed to load policy
[   36.470921][ T3608] all: renamed from lo (while UP)
[   36.561314][ T3613] loop1: detected capacity change from 0 to 512
[   36.595864][ T3612] loop2: detected capacity change from 0 to 512
[   36.614380][ T3615] loop4: detected capacity change from 0 to 1033
[   36.662982][ T3613] EXT4-fs: Ignoring removed bh option
[   36.677353][ T3612] EXT4-fs: Ignoring removed bh option
[   36.684329][ T3615] =======================================================
[   36.684329][ T3615] WARNING: The mand mount option has been deprecated and
[   36.684329][ T3615]          and is ignored by this kernel. Remove the mand
[   36.684329][ T3615]          option from the mount to silence this warning.
[   36.684329][ T3615] =======================================================
[   36.721984][ T3591] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   36.909046][ T3612] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.30: corrupted in-inode xattr: e_value size too large
[   36.923843][ T3613] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.28: corrupted in-inode xattr: e_value size too large
[   36.938437][ T3591] SELinux: failed to load policy
[   36.967302][ T3613] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   36.967437][ T3613] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.28: couldn't read orphan inode 15 (err -117)
[   36.976708][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   36.976728][    C1] EXT4-fs (loop1): initial error at time 1786170828: ext4_iget_extra_inode:5180: inode 15
[   36.976765][    C1] EXT4-fs (loop1): last error at time 1786170828: ext4_iget_extra_inode:5180: inode 15
[   37.018474][ T3612] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   37.023189][ T3612] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.30: couldn't read orphan inode 15 (err -117)
[   37.032588][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   37.032617][    C1] EXT4-fs (loop2): initial error at time 1786170828: ext4_iget_extra_inode:5180: inode 15
[   37.032748][    C1] EXT4-fs (loop2): last error at time 1786170828: ext4_iget_extra_inode:5180: inode 15
[   37.072958][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.086352][ T3613] loop1: lost filesystem error report for type 5 error -117
[   37.087109][ T3613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.108041][ T3615] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.121740][ T3612] loop2: lost filesystem error report for type 5 error -117
[   37.134603][ T3615] mmap: syz.4.29 (3615) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   37.154567][ T3612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.170852][ T3608] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   37.182982][ T3608] SELinux: failed to load policy
[   37.192550][ T3612] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   37.207875][ T3612] SELinux: failed to load policy
[   37.509271][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.540192][ T3624] alloc_netdev: Unable to allocate device with zero queues
[   37.626382][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.693374][ T3634] all: renamed from lo (while UP)
[   37.723549][ T3634] loop0: detected capacity change from 0 to 512
[   37.732796][ T3634] EXT4-fs: Ignoring removed bh option
[   37.750266][ T3634] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.34: corrupted in-inode xattr: e_value size too large
[   37.750877][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.764486][ T3634] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   37.781214][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   37.784816][ T3634] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.34: couldn't read orphan inode 15 (err -117)
[   37.790386][    C1] EXT4-fs (loop0): initial error at time 1786170829: ext4_iget_extra_inode:5180: inode 15
[   37.790418][    C1] EXT4-fs (loop0): last error at time 1786170829: ext4_iget_extra_inode:5180: inode 15
[   37.829776][ T3634] loop0: lost filesystem error report for type 5 error -117
[   37.841470][ T3634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.860855][ T3639] all: renamed from lo (while UP)
[   37.868066][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.892265][ T3634] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   37.900855][ T3634] SELinux: failed to load policy
[   37.939538][ T3642] EXT4-fs: Ignoring removed bh option
[   37.991912][ T3648] all: renamed from lo (while UP)
[   38.012523][ T3642] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.37: corrupted in-inode xattr: e_value size too large
[   38.026472][ T3642] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   38.026695][ T3642] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.37: couldn't read orphan inode 15 (err -117)
[   38.035854][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   38.035876][    C0] EXT4-fs (loop3): initial error at time 1786170829: ext4_iget_extra_inode:5180: inode 15
[   38.035905][    C0] EXT4-fs (loop3): last error at time 1786170829: ext4_iget_extra_inode:5180: inode 15
[   38.073602][ T3642] loop3: lost filesystem error report for type 5 error -117
[   38.074368][ T3642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.107524][ T3639] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   38.116035][ T3639] SELinux: failed to load policy
[   38.134957][ T3648] EXT4-fs: Ignoring removed bh option
[   38.224382][ T3648] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.40: corrupted in-inode xattr: e_value size too large
[   38.239090][ T3648] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   38.240072][ T3648] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.40: couldn't read orphan inode 15 (err -117)
[   38.249543][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   38.249573][    C0] EXT4-fs (loop2): initial error at time 1786170830: ext4_iget_extra_inode:5180: inode 15
[   38.249694][    C0] EXT4-fs (loop2): last error at time 1786170830: ext4_iget_extra_inode:5180: inode 15
[   38.295024][ T3648] loop2: lost filesystem error report for type 5 error -117
[   38.299091][ T3648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.407024][ T3648] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   38.660772][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.892362][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.120777][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.196886][ T3664] Zero length message leads to an empty skb
[   39.237599][ T3665] __nla_validate_parse: 8 callbacks suppressed
[   39.237740][ T3665] netlink: 152 bytes leftover after parsing attributes in process `syz.3.42'.
[   39.387091][ T3668] all: renamed from lo (while UP)
[   39.430066][ T3668] SELinux:  policydb string  does not match my string SE Linux
[   39.442631][   T28] kauditd_printk_skb: 47 callbacks suppressed
[   39.442642][   T28] audit: type=1400 audit(1786170831.393:223): avc:  denied  { mount } for  pid=3669 comm="syz.2.45" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   39.475961][ T3668] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   39.485697][ T3668] sel_write_load: 2 callbacks suppressed
[   39.485747][ T3668] SELinux: failed to load policy
[   39.496975][   T28] audit: type=1400 audit(1786170831.423:224): avc:  denied  { search } for  pid=3669 comm="syz.2.45" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   39.529596][   T28] audit: type=1400 audit(1786170831.423:225): avc:  denied  { search } for  pid=3669 comm="syz.2.45" name="events" dev="tracefs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   39.553248][   T28] audit: type=1400 audit(1786170831.423:226): avc:  denied  { search } for  pid=3669 comm="syz.2.45" name="kmem" dev="tracefs" ino=6243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   39.575502][   T28] audit: type=1400 audit(1786170831.423:227): avc:  denied  { search } for  pid=3669 comm="syz.2.45" name="kmalloc" dev="tracefs" ino=6245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   39.601457][   T28] audit: type=1400 audit(1786170831.423:228): avc:  denied  { read write } for  pid=3669 comm="syz.2.45" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   39.630484][   T28] audit: type=1400 audit(1786170831.423:229): avc:  denied  { open } for  pid=3669 comm="syz.2.45" path="/13/trace/events/kmem/kmalloc/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   39.642452][ T3668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'.
[   39.656599][   T28] audit: type=1400 audit(1786170831.573:230): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   39.708807][   T28] audit: type=1400 audit(1786170831.583:231): avc:  denied  { create } for  pid=3673 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   39.729597][   T28] audit: type=1400 audit(1786170831.583:232): avc:  denied  { connect } for  pid=3673 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   39.763333][ T3672] netlink: 152 bytes leftover after parsing attributes in process `syz.1.46'.
[   39.858697][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.866727][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.874420][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.882030][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.889451][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.897960][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.905538][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.913052][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.920440][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.927862][ T1039] hid-generic 0000:000A:0072.0001: unknown main item tag 0x0
[   39.965037][ T1039] hid-generic 0000:000A:0072.0001: hidraw0: <UNKNOWN> HID v10.00 Device [syz1] on syz0
[   39.984219][ T3690] all: renamed from lo (while UP)
[   39.997698][ T3690] SELinux:  policydb string  does not match my string SE Linux
[   40.005633][ T3690] SELinux: failed to load policy
[   40.026478][ T3688] fido_id[3688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   40.034344][ T3692] all: renamed from lo (while UP)
[   40.073586][ T3692] SELinux:  policydb string  does not match my string SE Linux
[   40.081651][ T3692] SELinux: failed to load policy
[   40.099207][ T3690] set_capacity_and_notify: 3 callbacks suppressed
[   40.099255][ T3690] loop1: detected capacity change from 0 to 512
[   40.133394][ T3690] EXT4-fs: Ignoring removed bh option
[   40.150033][ T3692] loop0: detected capacity change from 0 to 512
[   40.152333][ T3690] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.51: corrupted in-inode xattr: e_value size too large
[   40.161746][ T3692] EXT4-fs: Ignoring removed bh option
[   40.171507][ T3690] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   40.176810][ T3690] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.51: couldn't read orphan inode 15 (err -117)
[   40.186157][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   40.186200][    C1] EXT4-fs (loop1): initial error at time 1786170832: ext4_iget_extra_inode:5180: inode 15
[   40.186238][    C1] EXT4-fs (loop1): last error at time 1786170832: ext4_iget_extra_inode:5180: inode 15
[   40.222354][ T3692] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.52: corrupted in-inode xattr: e_value size too large
[   40.224676][ T3690] loop1: lost filesystem error report for type 5 error -117
[   40.228727][ T3690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.238910][ T3692] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   40.241074][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   40.259972][ T3692] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.52: couldn't read orphan inode 15 (err -117)
[   40.268265][    C0] EXT4-fs (loop0): initial error at time 1786170832: ext4_iget_extra_inode:5180: inode 15
[   40.268293][    C0] EXT4-fs (loop0): last error at time 1786170832: ext4_iget_extra_inode:5180: inode 15
[   40.308404][ T3692] loop0: lost filesystem error report for type 5 error -117
[   40.311897][ T3692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.335771][ T3690] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   40.338422][ T3696] loop3: detected capacity change from 0 to 256
[   40.344451][ T3690] SELinux: failed to load policy
[   40.382042][ T3690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'.
[   40.422511][ T3692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.52'.
[   40.468311][ T3698] netlink: 204 bytes leftover after parsing attributes in process `syz.3.53'.
[   40.799457][ T3697] ==================================================================
[   40.807577][ T3697] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[   40.814795][ T3697] 
[   40.817115][ T3697] write to 0xffff8881005247f4 of 4 bytes by task 3696 on cpu 1:
[   40.824736][ T3697]  __xa_set_mark+0x172/0x1a0
[   40.829331][ T3697]  __folio_mark_dirty+0x42c/0x520
[   40.834359][ T3697]  mark_buffer_dirty+0x120/0x1f0
[   40.839302][ T3697]  block_write_end+0x12d/0x210
[   40.844080][ T3697]  generic_write_end+0x56/0x150
[   40.848933][ T3697]  fat_write_end+0x4f/0x160
[   40.853429][ T3697]  generic_perform_write+0x314/0x490
[   40.858710][ T3697]  __generic_file_write_iter+0x9e/0x120
[   40.864256][ T3697]  generic_file_write_iter+0x77/0x1f0
[   40.869626][ T3697]  iter_file_splice_write+0x6a0/0xa60
[   40.874992][ T3697]  direct_splice_actor+0x156/0x280
[   40.880118][ T3697]  splice_direct_to_actor+0x2f9/0x680
[   40.885494][ T3697]  do_splice_direct+0x119/0x1a0
[   40.890344][ T3697]  do_sendfile+0x37d/0x640
[   40.894758][ T3697]  __x64_sys_sendfile64+0x105/0x150
[   40.899960][ T3697]  x64_sys_call+0x2dc4/0x3020
[   40.904645][ T3697]  do_syscall_64+0x136/0x3c0
[   40.909237][ T3697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.915130][ T3697] 
[   40.917456][ T3697] read to 0xffff8881005247f4 of 4 bytes by task 3697 on cpu 0:
[   40.924991][ T3697]  xas_find_marked+0x602/0x650
[   40.929778][ T3697]  filemap_get_folios_tag+0xf7/0x400
[   40.935066][ T3697]  file_write_and_wait_range+0x20c/0x2f0
[   40.940697][ T3697]  mmb_fsync_noflush+0x48/0x140
[   40.945549][ T3697]  fat_file_fsync+0x98/0x110
[   40.950148][ T3697]  vfs_fsync_range+0xc5/0xe0
[   40.954737][ T3697]  generic_file_write_iter+0x1a3/0x1f0
[   40.960188][ T3697]  iter_file_splice_write+0x6a0/0xa60
[   40.965548][ T3697]  direct_splice_actor+0x156/0x280
[   40.970646][ T3697]  splice_direct_to_actor+0x2f9/0x680
[   40.976007][ T3697]  do_splice_direct+0x119/0x1a0
[   40.980845][ T3697]  do_sendfile+0x37d/0x640
[   40.985260][ T3697]  __x64_sys_sendfile64+0x105/0x150
[   40.990447][ T3697]  x64_sys_call+0x2dc4/0x3020
[   40.995109][ T3697]  do_syscall_64+0x136/0x3c0
[   40.999686][ T3697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.005562][ T3697] 
[   41.007868][ T3697] value changed: 0x04000021 -> 0x0e000021
[   41.013564][ T3697] 
[   41.015869][ T3697] Reported by Kernel Concurrency Sanitizer on:
[   41.022005][ T3697] CPU: 0 UID: 0 PID: 3697 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(lazy) 
[   41.031097][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.041133][ T3697] ==================================================================
[   41.059316][ T3692] syz.0.52 (3692) used greatest stack depth: 10240 bytes left
[   41.067727][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.162288][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.812255][ T3624] netdevsim netdevsim10: probe with driver netdevsim failed with error -12