last executing test programs:

1m31.783153458s ago: executing program 2 (id=3):
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x88001)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000002000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000600"/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r2}, 0x10)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000180)=0x1)

1m31.699586904s ago: executing program 2 (id=6):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00')
lseek(r0, 0x0, 0x0)

1m31.699176834s ago: executing program 2 (id=8):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
fcntl$notify(r1, 0x402, 0xc0000000)
r2 = syz_open_procfs(0x0, &(0x7f0000001ac0)='net/sctp\x00')
getdents64(r2, &(0x7f0000000080)=""/51, 0x33)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)

1m31.609017742s ago: executing program 2 (id=9):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x44}}, 0x14)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000780)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@quota}]}, 0x41, 0x553, &(0x7f0000000a40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000000001000000180020000000000000", @ANYRES32, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r3) (fail_nth: 4)

1m30.483044174s ago: executing program 2 (id=13):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='percpu_destroy_chunk\x00', r0, 0x0, 0xfa1}, 0x18)
signalfd4(r0, &(0x7f00000004c0), 0x8, 0x80000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = dup(r6)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[], 0x53)
write$binfmt_elf64(r7, 0x0, 0x7c8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x7fd, '\x00', r8, r9, 0x2, 0x1, 0x4}, 0x50)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3000000000080004400000000008000940deffff0008000340000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0)

1m27.883292596s ago: executing program 0 (id=43):
open(&(0x7f0000000300)='./bus\x00', 0x82342, 0x1d6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

1m27.660723694s ago: executing program 0 (id=45):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4)
epoll_create1(0xb25837a46ed43a71)
sendto$inet(r1, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

1m27.542551504s ago: executing program 0 (id=46):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = io_uring_setup(0x2b7b, &(0x7f0000000240)={0x0, 0x73cd, 0x4000, 0x1, 0x2b8})
r3 = syz_io_uring_setup(0x4da4, &(0x7f0000000300)={0x0, 0x4661, 0x0, 0x3, 0x1b0, 0x0, r2}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000680)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = getpid()
r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000001c0)='udp_fail_queue_rcv_skb\x00', r7, 0x0, 0x9}, 0x18)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
close_range(r0, r1, 0x0)

1m26.569252773s ago: executing program 0 (id=52):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080))
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000)
getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
unshare(0x62040200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040), 0xfe, 0x264, &(0x7f0000000700)="$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")
unshare(0x2c020400)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240001052abd7000fedbdf25090000000600030000000000060004"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
r7 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r7, 0xa)

1m26.085191403s ago: executing program 0 (id=60):
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

1m26.028929437s ago: executing program 2 (id=61):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0)

1m25.916983967s ago: executing program 32 (id=61):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0)

1m25.701151404s ago: executing program 0 (id=63):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8)

1m25.648887518s ago: executing program 33 (id=63):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8)

3.221079077s ago: executing program 1 (id=978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080))
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
unshare(0x62040200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0xa0000004})
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040), 0xfe, 0x264, &(0x7f0000000700)="$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")
unshare(0x2c020400)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0)

3.104483136s ago: executing program 1 (id=980):
migrate_pages(0x0, 0x4421, &(0x7f00000003c0)=0x8ff, &(0x7f0000000400)=0x80000000)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x149882, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000001540)='GPL\x00', 0x4, 0x9d, &(0x7f0000001580)=""/157, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0xd, 0x7fffffff, 0xc}, 0x10, 0xde20, r3, 0x3, 0x0, &(0x7f0000001740)=[{0x2, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x4, 0x2}, {0x1, 0x3, 0x5, 0x9}], 0x10, 0x80000001}, 0x94)
socket(0xa, 0x3, 0x3a)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]})
r7 = gettid()
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000640)="9a256a9f48d41ded84809c817e566ef835a3b9", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
fcntl$setstatus(r0, 0x4, 0x46400)

3.087389357s ago: executing program 5 (id=981):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000400)=""/132, 0x84)
lseek(r3, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000002c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
dup2(r6, r6)
pipe(&(0x7f0000000500)={<r7=>0xffffffffffffffff})
splice(r7, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x2, 0x2000}, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='siw\x00')
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0xb, 0x4}, 0x20)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
pidfd_send_signal(r0, 0x0, &(0x7f0000000400)={0x10, 0x9, 0x2}, 0x0)

2.917806451s ago: executing program 5 (id=985):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

2.8106243s ago: executing program 5 (id=988):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

2.638082484s ago: executing program 5 (id=991):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000002380))
preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
read(r4, &(0x7f0000000200)=""/202, 0xca)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}})
tkill(r3, 0x7)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x3})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x2040400)
unshare(0x2020200)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1200)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x20004080)

2.595020688s ago: executing program 6 (id=992):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.593738008s ago: executing program 6 (id=993):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)
set_mempolicy(0x4007, &(0x7f0000000000)=0xfff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)

2.508082875s ago: executing program 6 (id=995):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='percpu_destroy_chunk\x00', r0, 0x0, 0xfa1}, 0x18)
signalfd4(r0, &(0x7f00000004c0), 0x8, 0x80000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = dup(r5)
write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[], 0x53)
write$binfmt_elf64(r6, 0x0, 0x7c8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x7fd, '\x00', r7, r8, 0x2, 0x1, 0x4}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3000000000080004400000000008000940deffff0008000340000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0)

2.506975115s ago: executing program 5 (id=996):
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0)
mount$nfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x80000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x7fffffff, 0x40, 0x0, 0xd})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)

2.213779049s ago: executing program 1 (id=997):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@gettaction={0x17c, 0x32, 0x1, 0x2, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6ba2}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ffffffb}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x80001)
r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x25, 0xff, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

2.043409203s ago: executing program 1 (id=999):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x40041)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000016c0)=0x1000000, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

1.94809118s ago: executing program 6 (id=1000):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000002380))
preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
read(r4, &(0x7f0000000200)=""/202, 0xca)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0xbf, 0x0, {0x3}})
tkill(r3, 0x7)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x3})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x2040400)
unshare(0x2020200)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x20004080)

1.787945344s ago: executing program 6 (id=1002):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0)
writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x80001)
r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x25, 0xff, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1.652653035s ago: executing program 6 (id=1003):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000001f)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
close_range(r1, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
getrlimit(0x1, 0x0)
setreuid(0xee00, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcad}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0)
unshare(0x64000600)

1.576518381s ago: executing program 5 (id=1004):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40840)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000083}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x200000000008}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x0)
ioctl$TCSETSW2(r7, 0x5425, 0x0)

1.494673077s ago: executing program 1 (id=1006):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
symlink(0x0, 0x0)
memfd_create(0x0, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)

1.327737381s ago: executing program 1 (id=1007):
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='sys_enter\x00'}, 0x18)
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40840)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000083}, 0x94)

1.177450894s ago: executing program 4 (id=1009):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f0000000880)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/145, 0x91}, {&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f00000006c0)=""/232, 0xe8}], 0x8, &(0x7f0000000840)=""/14, 0xe}, 0x2000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001ac0)=0x10000)

1.157209705s ago: executing program 4 (id=1010):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

763.163187ms ago: executing program 3 (id=1013):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

671.473344ms ago: executing program 3 (id=1014):
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0)
mount$nfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x80000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x3, 0x7fffffff, 0x40, 0x0, 0xd})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)

486.29515ms ago: executing program 3 (id=1015):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

357.96411ms ago: executing program 3 (id=1016):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x40041)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000016c0)=0x1000000, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

293.469025ms ago: executing program 4 (id=1017):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
unshare(0x2c060000)
unshare(0x2c020400)
perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x6f, 0xf, 0xff, 0x7, 0x0, 0x4, 0x80080, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x28f8, 0x4, @perf_bp={&(0x7f0000000140), 0x5}, 0x80, 0x6, 0x1, 0x7, 0x4a, 0x1, 0x200, 0x0, 0x10001, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rt_sigaction(0x3d, &(0x7f00000003c0)={&(0x7f0000000300)="64460f0f880d0000000dc4a249aa53c865660f38dd5e003e3e36660f3841a8feefffffc4e1d75e68a470fd64f2440f5cfe26f0f791c90f0000c4c1d5f845ca0f18d6", 0x0, &(0x7f0000000380)="8f28108ec914c4c1a1e08749ddffffc40125f5ddc4612de8b9b0000000f33647e3bbc443717d07f88fca901201080000000f61feaad9fb", {[0x2]}}, &(0x7f00000004c0)={&(0x7f0000000400)="65410f1c1551000000c4827925f9c4e1fc10946b00800000660f6dfac40329793d0b0000000036f2400f1ad5420f38cbba00800000c4e27d2006c4e209912cf6f3420faed0", 0x0, &(0x7f0000000480)="3e3667f3420f1ecc04fd672e36360faef936f3440f0113660faef7470faeebf36cf0f65f0547ccf3f7f5"}, 0x8, &(0x7f0000000500))
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000400000032a90204989d0700b0fc9b223cd581cdb201c300", @ANYRES32, @ANYBLOB="08008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=bind:N-', @ANYRESOCT])
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5ff2e432e2db1158, 0x10010, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

258.942838ms ago: executing program 4 (id=1018):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)

176.025445ms ago: executing program 4 (id=1019):
socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=ANY=[@ANYBLOB="6801000013000100feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="062000000303000008000a00", @ANYRES32=0x0, @ANYBLOB="050027000000000008000500", @ANYRES32=0x0, @ANYBLOB="1400030062617461647630000000d84b0000000008000a00"], 0x168}, 0x1, 0x0, 0x0, 0x8804}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

32.140987ms ago: executing program 3 (id=1020):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x40}}, 0x0)

29.193527ms ago: executing program 4 (id=1021):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000001f)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
close_range(r1, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
getrlimit(0x1, 0x0)
setreuid(0xee00, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)

0s ago: executing program 3 (id=1022):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xa}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000195"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r9, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6b02444b}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfffffff1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xfffffffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20001014}, 0x48090)
sendto$llc(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10)
close_range(r7, 0xffffffffffffffff, 0x200000000000000)

kernel console output (not intermixed with test programs):

5 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8144eb69 code=0x7ffc0000
[   43.187416][   T29] audit: type=1326 audit(1754160099.878:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8144eb69 code=0x7ffc0000
[   43.210707][   T29] audit: type=1326 audit(1754160099.878:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fef8144eb69 code=0x7ffc0000
[   43.233774][   T29] audit: type=1326 audit(1754160099.888:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8144eb69 code=0x7ffc0000
[   43.253088][ T3679] loop4: detected capacity change from 0 to 8192
[   43.270699][ T3681] loop1: detected capacity change from 0 to 512
[   43.278555][   T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.318104][ T3681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.331313][ T3681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   43.370694][ T3681] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   43.386921][   T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.406191][ T3681] EXT4-fs (loop1): 1 truncate cleaned up
[   43.414690][ T3674] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.446029][ T3681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.466378][   T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.554364][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.567172][   T37] bridge_slave_1: left allmulticast mode
[   43.572912][   T37] bridge_slave_1: left promiscuous mode
[   43.579561][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.594628][   T37] bridge_slave_0: left allmulticast mode
[   43.600412][   T37] bridge_slave_0: left promiscuous mode
[   43.606054][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.697826][ T3700] loop1: detected capacity change from 0 to 512
[   43.706189][ T3700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   43.733112][ T3700] EXT4-fs (loop1): 1 truncate cleaned up
[   43.749732][ T3700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.770609][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   43.789018][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.798508][   T37] bond0 (unregistering): Released all slaves
[   43.848084][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.878853][   T37] hsr_slave_0: left promiscuous mode
[   43.914221][   T37] hsr_slave_1: left promiscuous mode
[   43.923469][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.930954][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.942178][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.949734][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.964885][   T37] veth1_macvtap: left promiscuous mode
[   43.972262][   T37] veth0_macvtap: left promiscuous mode
[   43.977823][   T37] veth1_vlan: left promiscuous mode
[   43.998899][   T37] veth0_vlan: left promiscuous mode
[   44.171036][   T37] team0 (unregistering): Port device team_slave_1 removed
[   44.185620][   T37] team0 (unregistering): Port device team_slave_0 removed
[   44.578804][ T3694] chnl_net:caif_netlink_parms(): no params data found
[   44.697204][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.700317][ T3758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.73'.
[   44.704366][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.724795][ T3694] bridge_slave_0: entered allmulticast mode
[   44.731758][ T3694] bridge_slave_0: entered promiscuous mode
[   44.738826][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.745905][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.753244][ T3694] bridge_slave_1: entered allmulticast mode
[   44.770696][ T3694] bridge_slave_1: entered promiscuous mode
[   44.783750][ T3758] netlink: 216 bytes leftover after parsing attributes in process `syz.3.73'.
[   44.796314][ T3758] netlink: 216 bytes leftover after parsing attributes in process `syz.3.73'.
[   44.805453][ T3758] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   44.867136][ T3694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.926897][ T3694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.002344][ T3684] chnl_net:caif_netlink_parms(): no params data found
[   45.048489][ T3780] netlink: 'syz.4.76': attribute type 10 has an invalid length.
[   45.060093][ T3694] team0: Port device team_slave_0 added
[   45.081319][ T3780] team0: Device ipvlan0 failed to register rx_handler
[   45.122333][ T3694] team0: Port device team_slave_1 added
[   45.164072][ T3694] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.171133][ T3694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.197251][ T3694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.223196][ T3786] netlink: 'syz.4.79': attribute type 21 has an invalid length.
[   45.234487][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.241745][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.249080][ T3684] bridge_slave_0: entered allmulticast mode
[   45.255776][ T3684] bridge_slave_0: entered promiscuous mode
[   45.272863][ T3694] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.279912][ T3694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.306059][ T3694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.327501][ T3786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.79'.
[   45.336609][ T3786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.79'.
[   45.361340][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.368476][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.376567][ T3684] bridge_slave_1: entered allmulticast mode
[   45.387172][ T3684] bridge_slave_1: entered promiscuous mode
[   45.506223][   T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.577440][ T3684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.589954][ T3694] hsr_slave_0: entered promiscuous mode
[   45.596449][ T3694] hsr_slave_1: entered promiscuous mode
[   45.604773][ T3694] debugfs: 'hsr0' already exists in 'hsr'
[   45.610554][ T3694] Cannot create hsr debugfs directory
[   45.618353][ T3684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.695908][   T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.784956][   T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.815390][ T3684] team0: Port device team_slave_0 added
[   45.829831][ T3684] team0: Port device team_slave_1 added
[   45.838813][   T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.904592][ T3684] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.911726][ T3684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.938054][ T3684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.968592][ T3822] netlink: 'syz.1.85': attribute type 10 has an invalid length.
[   45.988525][ T3684] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.995506][ T3684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.021484][ T3684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.041259][ T3822] ipvlan0: entered allmulticast mode
[   46.046892][ T3822] veth0_vlan: entered allmulticast mode
[   46.071070][ T3822] team0: Device ipvlan0 failed to register rx_handler
[   46.146922][ T3684] hsr_slave_0: entered promiscuous mode
[   46.158577][ T3684] hsr_slave_1: entered promiscuous mode
[   46.164794][ T3684] debugfs: 'hsr0' already exists in 'hsr'
[   46.170601][ T3684] Cannot create hsr debugfs directory
[   46.196836][   T37] bridge_slave_1: left allmulticast mode
[   46.202641][   T37] bridge_slave_1: left promiscuous mode
[   46.208403][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.220162][   T37] bridge_slave_0: left allmulticast mode
[   46.225869][   T37] bridge_slave_0: left promiscuous mode
[   46.231753][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.358370][ T3842] loop4: detected capacity change from 0 to 512
[   46.395870][ T3842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   46.418671][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   46.430378][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   46.445814][   T37] bond0 (unregistering): Released all slaves
[   46.453361][ T3842] EXT4-fs (loop4): 1 truncate cleaned up
[   46.460211][ T3842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.516423][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.632644][   T37] hsr_slave_0: left promiscuous mode
[   46.640401][   T37] hsr_slave_1: left promiscuous mode
[   46.646043][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.653574][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[   46.670083][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.677533][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[   46.696677][   T37] veth1_macvtap: left promiscuous mode
[   46.706995][   T37] veth0_macvtap: left promiscuous mode
[   46.712587][   T37] veth1_vlan: left promiscuous mode
[   46.717927][   T37] veth0_vlan: left promiscuous mode
[   46.735577][ T3866] netlink: 'syz.3.94': attribute type 10 has an invalid length.
[   46.845160][   T37] team0 (unregistering): Port device team_slave_1 removed
[   46.862287][   T37] team0 (unregistering): Port device team_slave_0 removed
[   46.940024][ T3694] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   46.969363][ T3866] ipvlan0: entered allmulticast mode
[   46.975261][ T3866] veth0_vlan: entered allmulticast mode
[   47.231584][ T3866] team0: Device ipvlan0 failed to register rx_handler
[   47.708922][ T3866] syz.3.94 (3866) used greatest stack depth: 9224 bytes left
[   47.832011][ T3694] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   47.880701][ T3694] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   47.938111][   T29] kauditd_printk_skb: 274 callbacks suppressed
[   47.938186][   T29] audit: type=1400 audit(1754160104.838:499): avc:  denied  { map_create } for  pid=3881 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   47.963349][   T29] audit: type=1400 audit(1754160104.838:500): avc:  denied  { map_read map_write } for  pid=3881 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   48.009137][ T3694] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   48.046711][   T29] audit: type=1400 audit(1754160104.868:501): avc:  denied  { search } for  pid=3029 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.068100][   T29] audit: type=1400 audit(1754160104.868:502): avc:  denied  { search } for  pid=3029 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.089791][   T29] audit: type=1400 audit(1754160104.868:503): avc:  denied  { search } for  pid=3029 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   48.111466][   T29] audit: type=1400 audit(1754160104.868:504): avc:  denied  { read } for  pid=3029 comm="dhcpcd" name="n29" dev="tmpfs" ino=936 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   48.133017][   T29] audit: type=1400 audit(1754160104.868:505): avc:  denied  { open } for  pid=3029 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=936 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   48.138230][ T3898] netlink: 'syz.3.98': attribute type 10 has an invalid length.
[   48.155875][   T29] audit: type=1400 audit(1754160104.868:506): avc:  denied  { getattr } for  pid=3029 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=936 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   48.187051][   T29] audit: type=1400 audit(1754160104.888:507): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   48.207267][   T29] audit: type=1400 audit(1754160104.898:508): avc:  denied  { allowed } for  pid=3877 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   48.231442][ T3684] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   48.244330][ T3898] team0: Device ipvlan0 failed to register rx_handler
[   48.259253][ T3684] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   48.306416][ T3684] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   48.338434][ T3684] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   48.358237][ T3896] netlink: 'syz.4.96': attribute type 10 has an invalid length.
[   48.385465][ T3896] team0: Device ipvlan0 failed to register rx_handler
[   48.412161][ T3694] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.428319][ T3694] 8021q: adding VLAN 0 to HW filter on device team0
[   48.454044][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.461260][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.483586][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.490796][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.526005][ T3694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.536642][ T3694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.582984][ T3684] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.622981][ T3684] 8021q: adding VLAN 0 to HW filter on device team0
[   48.676210][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.683392][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.715299][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.722421][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.730716][ T3940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'.
[   48.770769][ T3684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.781209][ T3684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.814911][ T3694] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.942120][ T3960] loop4: detected capacity change from 0 to 128
[   48.947718][ T3684] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.015930][ T3967] netlink: 'syz.1.106': attribute type 10 has an invalid length.
[   49.041625][ T3960] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   49.057806][ T3960] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.085481][ T3967] team0: Device ipvlan0 failed to register rx_handler
[   49.085820][ T3960] ext2 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   49.227550][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   49.361060][ T3694] veth0_vlan: entered promiscuous mode
[   49.393315][ T3694] veth1_vlan: entered promiscuous mode
[   49.415873][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'.
[   49.451091][ T3684] veth0_vlan: entered promiscuous mode
[   49.469146][ T3694] veth0_macvtap: entered promiscuous mode
[   49.496912][ T3694] veth1_macvtap: entered promiscuous mode
[   49.741574][ T3684] veth1_vlan: entered promiscuous mode
[   49.776278][ T3694] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.790465][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.872429][ T3694] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.975023][ T3684] veth0_macvtap: entered promiscuous mode
[   49.981972][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.996025][   T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.015621][ T3684] veth1_macvtap: entered promiscuous mode
[   50.028572][   T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.057864][ T3684] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.074238][   T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.091357][ T3684] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.102022][   T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.131343][   T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.167459][   T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.170358][ T4034] netlink: 'syz.3.116': attribute type 10 has an invalid length.
[   50.182717][   T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.202670][   T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.225414][ T4034] team0: Device ipvlan0 failed to register rx_handler
[   51.795732][ T4088] loop5: detected capacity change from 0 to 128
[   51.830933][ T4088] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[   51.888474][ T4088] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.957870][ T4088] ext2 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   52.184015][ T4105] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   52.192484][ T4105] netlink: 12 bytes leftover after parsing attributes in process `+}[@'.
[   52.259352][ T4110] netlink: 32 bytes leftover after parsing attributes in process `syz.6.133'.
[   52.277152][ T4110] netlink: 216 bytes leftover after parsing attributes in process `syz.6.133'.
[   52.314387][ T3684] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   52.350882][ T4110] netlink: 216 bytes leftover after parsing attributes in process `syz.6.133'.
[   52.360170][ T4110] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   52.384920][ T4115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'.
[   52.393879][ T4115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'.
[   52.402875][ T4115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'.
[   52.483262][ T4125] netlink: 'syz.5.137': attribute type 10 has an invalid length.
[   52.501265][ T4071] syz.1.125 (4071) used greatest stack depth: 7312 bytes left
[   52.522580][ T4125] ipvlan0: entered allmulticast mode
[   52.531547][ T4125] veth0_vlan: entered allmulticast mode
[   52.586065][ T4125] team0: Device ipvlan0 failed to register rx_handler
[   52.959446][   T29] kauditd_printk_skb: 139 callbacks suppressed
[   52.959464][   T29] audit: type=1400 audit(1754160109.868:648): avc:  denied  { write } for  pid=4170 comm="syz.5.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   53.033788][   T29] audit: type=1400 audit(1754160109.898:649): avc:  denied  { map_create } for  pid=4174 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   53.052975][   T29] audit: type=1400 audit(1754160109.898:650): avc:  denied  { search } for  pid=4173 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   53.074710][ T4182] loop5: detected capacity change from 0 to 512
[   53.075046][   T29] audit: type=1400 audit(1754160109.898:651): avc:  denied  { read } for  pid=4173 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   53.103068][   T29] audit: type=1400 audit(1754160109.898:652): avc:  denied  { open } for  pid=4173 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   53.127993][   T29] audit: type=1400 audit(1754160109.898:653): avc:  denied  { getattr } for  pid=4173 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   53.136085][ T4182] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   53.153288][   T29] audit: type=1400 audit(1754160109.898:654): avc:  denied  { prog_load } for  pid=4174 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   53.182406][   T29] audit: type=1400 audit(1754160109.898:655): avc:  denied  { bpf } for  pid=4174 comm="syz.1.150" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   53.202915][   T29] audit: type=1400 audit(1754160109.908:656): avc:  denied  { open } for  pid=4170 comm="syz.5.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   53.209040][ T4182] EXT4-fs (loop5): 1 truncate cleaned up
[   53.222038][   T29] audit: type=1400 audit(1754160109.908:657): avc:  denied  { perfmon } for  pid=4170 comm="syz.5.149" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   53.278758][ T4182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.391383][ T4191] loop4: detected capacity change from 0 to 512
[   53.459384][ T4191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.503443][ T4191] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.585046][ T3684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.599322][ T4191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.738972][ T4186] loop4: detected capacity change from 0 to 1024
[   53.779126][ T4186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.796367][ T4216] FAULT_INJECTION: forcing a failure.
[   53.796367][ T4216] name failslab, interval 1, probability 0, space 0, times 0
[   53.809182][ T4216] CPU: 1 UID: 0 PID: 4216 Comm: syz.1.157 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   53.809219][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   53.809305][ T4216] Call Trace:
[   53.809312][ T4216]  <TASK>
[   53.809320][ T4216]  __dump_stack+0x1d/0x30
[   53.809344][ T4216]  dump_stack_lvl+0xe8/0x140
[   53.809362][ T4216]  dump_stack+0x15/0x1b
[   53.809378][ T4216]  should_fail_ex+0x265/0x280
[   53.809502][ T4216]  should_failslab+0x8c/0xb0
[   53.809527][ T4216]  __kvmalloc_node_noprof+0x123/0x4e0
[   53.809676][ T4216]  ? rhashtable_init_noprof+0x316/0x4f0
[   53.809783][ T4216]  rhashtable_init_noprof+0x316/0x4f0
[   53.809886][ T4216]  rhltable_init_noprof+0x1d/0x40
[   53.809907][ T4216]  nf_tables_newtable+0x522/0xea0
[   53.810018][ T4216]  nfnetlink_rcv+0xb99/0x1690
[   53.810081][ T4216]  netlink_unicast+0x5c0/0x690
[   53.810176][ T4216]  netlink_sendmsg+0x58b/0x6b0
[   53.810220][ T4216]  ? __pfx_netlink_sendmsg+0x10/0x10
[   53.810262][ T4216]  __sock_sendmsg+0x142/0x180
[   53.810314][ T4216]  ____sys_sendmsg+0x31e/0x4e0
[   53.810402][ T4216]  ___sys_sendmsg+0x17b/0x1d0
[   53.810590][ T4216]  __x64_sys_sendmsg+0xd4/0x160
[   53.810686][ T4216]  x64_sys_call+0x191e/0x2ff0
[   53.810709][ T4216]  do_syscall_64+0xd2/0x200
[   53.810738][ T4216]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   53.810805][ T4216]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   53.810833][ T4216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.810860][ T4216] RIP: 0033:0x7fc24eb5eb69
[   53.810879][ T4216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.810903][ T4216] RSP: 002b:00007fc24d1c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   53.810998][ T4216] RAX: ffffffffffffffda RBX: 00007fc24ed85fa0 RCX: 00007fc24eb5eb69
[   53.811034][ T4216] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[   53.811046][ T4216] RBP: 00007fc24d1c7090 R08: 0000000000000000 R09: 0000000000000000
[   53.811057][ T4216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.811071][ T4216] R13: 0000000000000000 R14: 00007fc24ed85fa0 R15: 00007ffd2c412208
[   53.811091][ T4216]  </TASK>
[   53.815972][ T4186] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.888873][ T4216] __nla_validate_parse: 8 callbacks suppressed
[   53.888892][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'.
[   54.000434][ T4186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.085128][ T4216] netlink: 312 bytes leftover after parsing attributes in process `syz.1.157'.
[   54.094186][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'.
[   55.478385][ T4258] netlink: 'syz.1.167': attribute type 21 has an invalid length.
[   55.567070][ T4258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.167'.
[   55.576132][ T4258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'.
[   56.070150][ T4289] netlink: 'syz.1.171': attribute type 10 has an invalid length.
[   56.150508][ T4289] team0: Device ipvlan0 failed to register rx_handler
[   56.516719][ T4319] netlink: 'syz.6.179': attribute type 10 has an invalid length.
[   56.671507][ T4319] ipvlan0: entered allmulticast mode
[   56.677617][ T4319] veth0_vlan: entered allmulticast mode
[   56.831585][ T4319] team0: Device ipvlan0 failed to register rx_handler
[   57.268311][ T4360] netlink: 'syz.6.187': attribute type 10 has an invalid length.
[   57.286934][ T4360] team0: Device ipvlan0 failed to register rx_handler
[   57.338929][ T4369] netlink: 'syz.1.188': attribute type 10 has an invalid length.
[   57.358673][ T4369] team0: Device ipvlan0 failed to register rx_handler
[   57.984245][ T4393] netlink: 'syz.4.194': attribute type 10 has an invalid length.
[   58.023475][ T4393] team0: Device ipvlan0 failed to register rx_handler
[   58.091611][   T29] kauditd_printk_skb: 215 callbacks suppressed
[   58.091625][   T29] audit: type=1400 audit(1754160114.998:873): avc:  denied  { create } for  pid=4396 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   58.123489][ T4397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.195'.
[   58.214278][ T4397] netlink: 216 bytes leftover after parsing attributes in process `syz.3.195'.
[   58.223400][ T4397] netlink: 216 bytes leftover after parsing attributes in process `syz.3.195'.
[   58.232508][ T4397] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   58.276750][   T29] audit: type=1400 audit(1754160115.028:874): avc:  denied  { ioctl } for  pid=4396 comm="syz.3.195" path="socket:[7677]" dev="sockfs" ino=7677 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   58.458368][   T29] audit: type=1400 audit(1754160115.228:875): avc:  denied  { create } for  pid=4404 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   58.478373][   T29] audit: type=1400 audit(1754160115.238:876): avc:  denied  { create } for  pid=4404 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   58.498129][   T29] audit: type=1400 audit(1754160115.238:877): avc:  denied  { write } for  pid=4404 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   58.517485][   T29] audit: type=1400 audit(1754160115.238:878): avc:  denied  { create } for  pid=4404 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   58.536805][   T29] audit: type=1400 audit(1754160115.248:879): avc:  denied  { setopt } for  pid=4404 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   58.574953][ T4409] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.599791][ T4409] bridge0: port 3(bond1) entered blocking state
[   58.606125][ T4409] bridge0: port 3(bond1) entered disabled state
[   58.671561][ T4409] bond1: entered allmulticast mode
[   58.691897][   T29] audit: type=1400 audit(1754160115.598:880): avc:  denied  { create } for  pid=4404 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   58.699458][ T4409] bond1: entered promiscuous mode
[   58.716715][ T4409] bridge0: port 3(bond1) entered blocking state
[   58.722536][ T4413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'.
[   58.723043][ T4409] bridge0: port 3(bond1) entered forwarding state
[   58.744229][   T29] audit: type=1326 audit(1754160115.648:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   58.767594][   T29] audit: type=1326 audit(1754160115.648:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4417 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   58.807943][ T3745] bridge0: port 3(bond1) entered disabled state
[   58.994327][ T4431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.204'.
[   59.015237][ T4431] netlink: 216 bytes leftover after parsing attributes in process `syz.1.204'.
[   59.035718][ T4431] netlink: 216 bytes leftover after parsing attributes in process `syz.1.204'.
[   59.044805][ T4431] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   59.239503][ T4441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.207'.
[   59.344551][ T4441] netlink: 216 bytes leftover after parsing attributes in process `syz.4.207'.
[   59.353754][ T4441] netlink: 216 bytes leftover after parsing attributes in process `syz.4.207'.
[   59.362786][ T4441] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   59.713740][ T4454] netlink: 56 bytes leftover after parsing attributes in process `syz.5.212'.
[   59.756184][ T4464] netlink: 'syz.3.216': attribute type 10 has an invalid length.
[   59.776727][ T4464] team0: Device ipvlan0 failed to register rx_handler
[   59.796467][ T4467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'.
[   59.834841][ T4471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.219'.
[   59.854065][ T4473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.864266][ T4473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.245027][ T4491] netlink: 'syz.3.226': attribute type 21 has an invalid length.
[   60.267993][ T4491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.226'.
[   60.672805][ T4470] delete_channel: no stack
[   61.580687][ T4537] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   61.660833][ T4539] netlink: zone id is out of range
[   61.666020][ T4539] netlink: zone id is out of range
[   61.671472][ T4539] netlink: zone id is out of range
[   61.676612][ T4539] netlink: zone id is out of range
[   61.687735][ T4493] syz.1.227 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   61.698265][ T4539] netlink: zone id is out of range
[   61.701827][ T4493] CPU: 0 UID: 0 PID: 4493 Comm: syz.1.227 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   61.701864][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   61.701882][ T4493] Call Trace:
[   61.701891][ T4493]  <TASK>
[   61.701902][ T4493]  __dump_stack+0x1d/0x30
[   61.701965][ T4493]  dump_stack_lvl+0xe8/0x140
[   61.701996][ T4493]  dump_stack+0x15/0x1b
[   61.702019][ T4493]  dump_header+0x81/0x220
[   61.702065][ T4493]  oom_kill_process+0x342/0x400
[   61.702112][ T4493]  out_of_memory+0x979/0xb80
[   61.702223][ T4493]  try_charge_memcg+0x5e6/0x9e0
[   61.702273][ T4493]  obj_cgroup_charge_pages+0xa6/0x150
[   61.702333][ T4493]  __memcg_kmem_charge_page+0x9f/0x170
[   61.702407][ T4493]  __alloc_frozen_pages_noprof+0x188/0x360
[   61.702461][ T4493]  alloc_pages_mpol+0xb3/0x250
[   61.702516][ T4493]  alloc_pages_noprof+0x90/0x130
[   61.702618][ T4493]  __vmalloc_node_range_noprof+0x6f2/0xe00
[   61.702681][ T4493]  __kvmalloc_node_noprof+0x30f/0x4e0
[   61.702723][ T4493]  ? ip_set_alloc+0x1f/0x30
[   61.702813][ T4493]  ? ip_set_alloc+0x1f/0x30
[   61.702851][ T4493]  ? __kmalloc_cache_noprof+0x189/0x320
[   61.702894][ T4493]  ip_set_alloc+0x1f/0x30
[   61.702931][ T4493]  hash_netiface_create+0x282/0x740
[   61.702975][ T4493]  ? __pfx_hash_netiface_create+0x10/0x10
[   61.703033][ T4493]  ip_set_create+0x3cc/0x960
[   61.703090][ T4493]  ? __nla_parse+0x40/0x60
[   61.703120][ T4493]  nfnetlink_rcv_msg+0x4c6/0x590
[   61.703271][ T4493]  netlink_rcv_skb+0x120/0x220
[   61.703317][ T4493]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   61.703366][ T4493]  nfnetlink_rcv+0x16b/0x1690
[   61.703407][ T4493]  ? nlmon_xmit+0x4f/0x60
[   61.703467][ T4493]  ? consume_skb+0x49/0x150
[   61.703510][ T4493]  ? nlmon_xmit+0x4f/0x60
[   61.703543][ T4493]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   61.703592][ T4493]  ? __dev_queue_xmit+0x1200/0x2000
[   61.703720][ T4493]  ? __dev_queue_xmit+0x182/0x2000
[   61.703769][ T4493]  ? ref_tracker_free+0x37d/0x3e0
[   61.703846][ T4493]  ? __netlink_deliver_tap+0x4dc/0x500
[   61.703934][ T4493]  netlink_unicast+0x5c0/0x690
[   61.703978][ T4493]  netlink_sendmsg+0x58b/0x6b0
[   61.704028][ T4493]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.704124][ T4493]  __sock_sendmsg+0x142/0x180
[   61.704190][ T4493]  ____sys_sendmsg+0x31e/0x4e0
[   61.704241][ T4493]  ___sys_sendmsg+0x17b/0x1d0
[   61.704360][ T4493]  __x64_sys_sendmsg+0xd4/0x160
[   61.704413][ T4493]  x64_sys_call+0x191e/0x2ff0
[   61.704443][ T4493]  do_syscall_64+0xd2/0x200
[   61.704538][ T4493]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   61.704572][ T4493]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   61.704602][ T4493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.704634][ T4493] RIP: 0033:0x7fc24eb5eb69
[   61.704656][ T4493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.704742][ T4493] RSP: 002b:00007fc24d1c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.704770][ T4493] RAX: ffffffffffffffda RBX: 00007fc24ed85fa0 RCX: 00007fc24eb5eb69
[   61.704790][ T4493] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006
[   61.704808][ T4493] RBP: 00007fc24ebe1df1 R08: 0000000000000000 R09: 0000000000000000
[   61.704823][ T4493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   61.704881][ T4493] R13: 0000000000000000 R14: 00007fc24ed85fa0 R15: 00007ffd2c412208
[   61.704908][ T4493]  </TASK>
[   61.704917][ T4493] memory: usage 307200kB, limit 307200kB, failcnt 266
[   61.707797][ T4539] netlink: zone id is out of range
[   61.718971][ T4493] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0
[   61.718993][ T4493] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   61.719008][ T4493] Memory cgroup stats for /syz1
[   61.739982][ T4539] netlink: zone id is out of range
[   61.744436][ T4493] :
[   61.890458][ T4546] netlink: 'syz.5.243': attribute type 21 has an invalid length.
[   61.894044][ T4493] cache 0
[   62.092383][ T4493] rss 0
[   62.095163][ T4493] shmem 0
[   62.098126][ T4493] mapped_file 0
[   62.101661][ T4493] dirty 0
[   62.104599][ T4493] writeback 0
[   62.107970][ T4493] workingset_refault_anon 97
[   62.112619][ T4493] workingset_refault_file 128
[   62.117325][ T4493] swap 372736
[   62.120710][ T4493] swapcached 8192
[   62.124437][ T4493] pgpgin 28600
[   62.127983][ T4493] pgpgout 28597
[   62.131477][ T4493] pgfault 25096
[   62.134949][ T4493] pgmajfault 48
[   62.138494][ T4493] inactive_anon 0
[   62.142152][ T4493] active_anon 8192
[   62.145877][ T4493] inactive_file 0
[   62.149553][ T4493] active_file 4096
[   62.153296][ T4493] unevictable 0
[   62.156769][ T4493] hierarchical_memory_limit 314572800
[   62.162266][ T4493] hierarchical_memsw_limit 9223372036854771712
[   62.168462][ T4493] total_cache 0
[   62.171946][ T4493] total_rss 0
[   62.175265][ T4493] total_shmem 0
[   62.178791][ T4493] total_mapped_file 0
[   62.182784][ T4493] total_dirty 0
[   62.186305][ T4493] total_writeback 0
[   62.190227][ T4493] total_workingset_refault_anon 97
[   62.195346][ T4493] total_workingset_refault_file 128
[   62.200580][ T4493] total_swap 372736
[   62.204432][ T4493] total_swapcached 8192
[   62.208667][ T4493] total_pgpgin 28600
[   62.212576][ T4493] total_pgpgout 28597
[   62.216566][ T4493] total_pgfault 25096
[   62.220654][ T4493] total_pgmajfault 48
[   62.224652][ T4493] total_inactive_anon 0
[   62.228835][ T4493] total_active_anon 8192
[   62.233083][ T4493] total_inactive_file 0
[   62.237256][ T4493] total_active_file 4096
[   62.241620][ T4493] total_unevictable 0
[   62.245619][ T4493] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.227,pid=4492,uid=0
[   62.260376][ T4493] Memory cgroup out of memory: Killed process 4492 (syz.1.227) total-vm:93896kB, anon-rss:1072kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   63.392697][   T29] kauditd_printk_skb: 298 callbacks suppressed
[   63.392730][   T29] audit: type=1326 audit(1754160120.298:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[   63.422371][   T29] audit: type=1326 audit(1754160120.298:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff17b1ed4d0 code=0x7ffc0000
[   63.445909][   T29] audit: type=1326 audit(1754160120.298:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[   63.469361][   T29] audit: type=1326 audit(1754160120.298:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[   63.492803][   T29] audit: type=1326 audit(1754160120.298:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[   63.516305][   T29] audit: type=1326 audit(1754160120.298:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[   63.612835][ T4559] netlink: 'syz.5.247': attribute type 10 has an invalid length.
[   63.682805][ T4559] team0: Device ipvlan0 failed to register rx_handler
[   63.743149][   T29] audit: type=1400 audit(1754160120.648:1187): avc:  denied  { connect } for  pid=4579 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   63.764407][   T29] audit: type=1400 audit(1754160120.648:1188): avc:  denied  { create } for  pid=4579 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   63.784661][   T29] audit: type=1400 audit(1754160120.648:1189): avc:  denied  { write } for  pid=4579 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   63.817772][   T29] audit: type=1326 audit(1754160120.718:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   63.844282][ T4580] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   63.859222][ T4580] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   63.877300][ T4588] net_ratelimit: 62 callbacks suppressed
[   63.877318][ T4588] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   64.064568][ T4607] netlink: 'syz.3.263': attribute type 10 has an invalid length.
[   64.080038][ T4607] team0: Device ipvlan0 failed to register rx_handler
[   64.154346][ T4613] __nla_validate_parse: 7 callbacks suppressed
[   64.154363][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.267'.
[   64.173761][ T4613] wireguard0: entered promiscuous mode
[   64.179457][ T4613] wireguard0: entered allmulticast mode
[   64.531027][ T4593] syz.4.259 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   64.545260][ T4593] CPU: 1 UID: 0 PID: 4593 Comm: syz.4.259 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   64.545370][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   64.545387][ T4593] Call Trace:
[   64.545394][ T4593]  <TASK>
[   64.545404][ T4593]  __dump_stack+0x1d/0x30
[   64.545431][ T4593]  dump_stack_lvl+0xe8/0x140
[   64.545457][ T4593]  dump_stack+0x15/0x1b
[   64.545536][ T4593]  dump_header+0x81/0x220
[   64.545571][ T4593]  oom_kill_process+0x342/0x400
[   64.545614][ T4593]  out_of_memory+0x979/0xb80
[   64.545697][ T4593]  try_charge_memcg+0x5e6/0x9e0
[   64.545731][ T4593]  obj_cgroup_charge_pages+0xa6/0x150
[   64.545839][ T4593]  __memcg_kmem_charge_page+0x9f/0x170
[   64.545884][ T4593]  __alloc_frozen_pages_noprof+0x188/0x360
[   64.546003][ T4593]  alloc_pages_mpol+0xb3/0x250
[   64.546049][ T4593]  alloc_pages_noprof+0x90/0x130
[   64.546126][ T4593]  __vmalloc_node_range_noprof+0x6f2/0xe00
[   64.546184][ T4593]  __kvmalloc_node_noprof+0x30f/0x4e0
[   64.546229][ T4593]  ? ip_set_alloc+0x1f/0x30
[   64.546262][ T4593]  ? ip_set_alloc+0x1f/0x30
[   64.546290][ T4593]  ? __kmalloc_cache_noprof+0x189/0x320
[   64.546377][ T4593]  ip_set_alloc+0x1f/0x30
[   64.546484][ T4593]  hash_netiface_create+0x282/0x740
[   64.546527][ T4593]  ? __pfx_hash_netiface_create+0x10/0x10
[   64.546590][ T4593]  ip_set_create+0x3cc/0x960
[   64.546658][ T4593]  ? __nla_parse+0x40/0x60
[   64.546732][ T4593]  nfnetlink_rcv_msg+0x4c6/0x590
[   64.546794][ T4593]  netlink_rcv_skb+0x120/0x220
[   64.546836][ T4593]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   64.546881][ T4593]  nfnetlink_rcv+0x16b/0x1690
[   64.546933][ T4593]  ? nlmon_xmit+0x4f/0x60
[   64.546964][ T4593]  ? consume_skb+0x49/0x150
[   64.547005][ T4593]  ? nlmon_xmit+0x4f/0x60
[   64.547031][ T4593]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   64.547140][ T4593]  ? __dev_queue_xmit+0x1200/0x2000
[   64.547203][ T4593]  ? __dev_queue_xmit+0x182/0x2000
[   64.547241][ T4593]  ? ref_tracker_free+0x37d/0x3e0
[   64.547296][ T4593]  ? __netlink_deliver_tap+0x4dc/0x500
[   64.547421][ T4593]  netlink_unicast+0x5c0/0x690
[   64.547456][ T4593]  netlink_sendmsg+0x58b/0x6b0
[   64.547544][ T4593]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.547585][ T4593]  __sock_sendmsg+0x142/0x180
[   64.547616][ T4593]  ____sys_sendmsg+0x31e/0x4e0
[   64.547737][ T4593]  ___sys_sendmsg+0x17b/0x1d0
[   64.547797][ T4593]  __x64_sys_sendmsg+0xd4/0x160
[   64.547873][ T4593]  x64_sys_call+0x191e/0x2ff0
[   64.547906][ T4593]  do_syscall_64+0xd2/0x200
[   64.547933][ T4593]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   64.547965][ T4593]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   64.548013][ T4593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.548041][ T4593] RIP: 0033:0x7ff17b1eeb69
[   64.548059][ T4593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.548115][ T4593] RSP: 002b:00007ff179857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   64.548141][ T4593] RAX: ffffffffffffffda RBX: 00007ff17b415fa0 RCX: 00007ff17b1eeb69
[   64.548223][ T4593] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006
[   64.548238][ T4593] RBP: 00007ff17b271df1 R08: 0000000000000000 R09: 0000000000000000
[   64.548254][ T4593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   64.548270][ T4593] R13: 0000000000000000 R14: 00007ff17b415fa0 R15: 00007ffdea06ae78
[   64.548297][ T4593]  </TASK>
[   64.879998][ T4593] memory: usage 307200kB, limit 307200kB, failcnt 166
[   64.886789][ T4593] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0
[   64.895098][ T4593] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[   64.902513][ T4593] Memory cgroup stats for /syz4:
[   64.919135][ T4593] cache 0
[   64.927274][ T4593] rss 0
[   64.930137][ T4593] shmem 0
[   64.933094][ T4593] mapped_file 0
[   64.936805][ T4593] dirty 0
[   64.939849][ T4593] writeback 0
[   64.943148][ T4593] workingset_refault_anon 26
[   64.947766][ T4593] workingset_refault_file 0
[   64.952332][ T4593] swap 221184
[   64.955637][ T4593] swapcached 0
[   64.959065][ T4593] pgpgin 23698
[   64.962446][ T4593] pgpgout 23697
[   64.965918][ T4593] pgfault 28513
[   64.969455][ T4593] pgmajfault 28
[   64.972932][ T4593] inactive_anon 0
[   64.976586][ T4593] active_anon 0
[   64.980133][ T4593] inactive_file 0
[   64.983782][ T4593] active_file 4096
[   64.987575][ T4593] unevictable 0
[   64.991105][ T4593] hierarchical_memory_limit 314572800
[   64.996495][ T4593] hierarchical_memsw_limit 9223372036854771712
[   65.002710][ T4593] total_cache 0
[   65.006214][ T4593] total_rss 0
[   65.009692][ T4593] total_shmem 0
[   65.013361][ T4593] total_mapped_file 0
[   65.017376][ T4593] total_dirty 0
[   65.020890][ T4593] total_writeback 0
[   65.024750][ T4593] total_workingset_refault_anon 26
[   65.029919][ T4593] total_workingset_refault_file 0
[   65.034963][ T4593] total_swap 221184
[   65.038852][ T4593] total_swapcached 0
[   65.042860][ T4593] total_pgpgin 23698
[   65.046778][ T4593] total_pgpgout 23697
[   65.050834][ T4593] total_pgfault 28513
[   65.054861][ T4593] total_pgmajfault 28
[   65.058906][ T4593] total_inactive_anon 0
[   65.063075][ T4593] total_active_anon 0
[   65.067066][ T4593] total_inactive_file 0
[   65.071337][ T4593] total_active_file 4096
[   65.075632][ T4593] total_unevictable 0
[   65.079700][ T4593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.259,pid=4591,uid=0
[   65.094505][ T4593] Memory cgroup out of memory: Killed process 4591 (syz.4.259) total-vm:93896kB, anon-rss:1072kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   65.119131][ T4635] netlink: 56 bytes leftover after parsing attributes in process `syz.1.276'.
[   65.156309][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'.
[   65.196101][ T4646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'.
[   65.205953][ T4642] wireguard1: entered promiscuous mode
[   65.211544][ T4642] wireguard1: entered allmulticast mode
[   65.220207][ T4646] netlink: 216 bytes leftover after parsing attributes in process `syz.1.279'.
[   65.229280][ T4646] netlink: 216 bytes leftover after parsing attributes in process `syz.1.279'.
[   65.238421][ T4646] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   65.528277][ T4660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.286'.
[   65.603667][ T4665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.288'.
[   65.624409][ T4665] netlink: 216 bytes leftover after parsing attributes in process `syz.1.288'.
[   65.633795][ T4665] netlink: 216 bytes leftover after parsing attributes in process `syz.1.288'.
[   65.642919][ T4665] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   67.534472][ T4695] netlink: 'syz.3.296': attribute type 21 has an invalid length.
[   68.087120][ T4724] siw: device registration error -23
[   68.154371][ T4719] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.169493][ T4719] bridge0: port 3(bond1) entered blocking state
[   68.175899][ T4719] bridge0: port 3(bond1) entered disabled state
[   68.195928][ T4719] bond1: entered allmulticast mode
[   68.214323][ T4719] bond1: entered promiscuous mode
[   68.231866][ T4719] bridge0: port 3(bond1) entered blocking state
[   68.238229][ T4719] bridge0: port 3(bond1) entered forwarding state
[   68.953500][   T29] kauditd_printk_skb: 430 callbacks suppressed
[   68.953555][   T29] audit: type=1326 audit(1754160125.858:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.044628][   T29] audit: type=1326 audit(1754160125.898:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.068107][   T29] audit: type=1326 audit(1754160125.898:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.091621][   T29] audit: type=1326 audit(1754160125.898:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.115093][   T29] audit: type=1326 audit(1754160125.898:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.138736][   T29] audit: type=1326 audit(1754160125.898:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.162290][   T29] audit: type=1326 audit(1754160125.898:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.185964][   T29] audit: type=1326 audit(1754160125.898:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.209811][   T29] audit: type=1326 audit(1754160125.898:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.233437][   T29] audit: type=1326 audit(1754160125.898:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   69.243890][ T4756] __nla_validate_parse: 5 callbacks suppressed
[   69.243912][ T4756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'.
[   69.408939][ T2142] bridge0: port 3(bond1) entered disabled state
[   70.031699][ T4755] delete_channel: no stack
[   70.096572][ T4785] netlink: 'syz.1.329': attribute type 21 has an invalid length.
[   70.114873][ T4785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.329'.
[   70.123982][ T4785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.329'.
[   70.329329][ T4795] netlink: 56 bytes leftover after parsing attributes in process `syz.3.332'.
[   70.407754][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.337'.
[   70.582939][ T4817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.340'.
[   70.736524][ T4825] netlink: 'syz.5.343': attribute type 10 has an invalid length.
[   70.755564][ T4825] team0: Device ipvlan0 failed to register rx_handler
[   70.764405][ T4827] FAULT_INJECTION: forcing a failure.
[   70.764405][ T4827] name failslab, interval 1, probability 0, space 0, times 0
[   70.777222][ T4827] CPU: 1 UID: 0 PID: 4827 Comm: syz.4.344 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   70.777291][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   70.777306][ T4827] Call Trace:
[   70.777314][ T4827]  <TASK>
[   70.777324][ T4827]  __dump_stack+0x1d/0x30
[   70.777351][ T4827]  dump_stack_lvl+0xe8/0x140
[   70.777375][ T4827]  dump_stack+0x15/0x1b
[   70.777391][ T4827]  should_fail_ex+0x265/0x280
[   70.777543][ T4827]  should_failslab+0x8c/0xb0
[   70.777594][ T4827]  __kmalloc_noprof+0xa5/0x3e0
[   70.777620][ T4827]  ? kobject_get_path+0x92/0x1c0
[   70.777656][ T4827]  kobject_get_path+0x92/0x1c0
[   70.777761][ T4827]  kobject_uevent_env+0x1da/0x570
[   70.777791][ T4827]  ? device_pm_check_callbacks+0x683/0x6a0
[   70.777820][ T4827]  kobject_uevent+0x1d/0x30
[   70.777866][ T4827]  device_del+0x710/0x790
[   70.777940][ T4827]  device_unregister+0x15/0x40
[   70.778032][ T4827]  bdi_unregister+0x307/0x3a0
[   70.778070][ T4827]  __del_gendisk+0x2c3/0x570
[   70.778102][ T4827]  del_gendisk+0xac/0xf0
[   70.778160][ T4827]  loop_remove+0x26/0x80
[   70.778187][ T4827]  loop_control_ioctl+0x3b3/0x3f0
[   70.778250][ T4827]  ? __pfx_loop_control_ioctl+0x10/0x10
[   70.778276][ T4827]  __se_sys_ioctl+0xcb/0x140
[   70.778320][ T4827]  __x64_sys_ioctl+0x43/0x50
[   70.778351][ T4827]  x64_sys_call+0x1816/0x2ff0
[   70.778450][ T4827]  do_syscall_64+0xd2/0x200
[   70.778472][ T4827]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   70.778495][ T4827]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   70.778599][ T4827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.778649][ T4827] RIP: 0033:0x7ff17b1eeb69
[   70.778663][ T4827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.778684][ T4827] RSP: 002b:00007ff179857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.778706][ T4827] RAX: ffffffffffffffda RBX: 00007ff17b415fa0 RCX: 00007ff17b1eeb69
[   70.778743][ T4827] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000003
[   70.778756][ T4827] RBP: 00007ff179857090 R08: 0000000000000000 R09: 0000000000000000
[   70.778771][ T4827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.778786][ T4827] R13: 0000000000000000 R14: 00007ff17b415fa0 R15: 00007ffdea06ae78
[   70.778817][ T4827]  </TASK>
[   71.087499][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'.
[   71.112602][ T4833] netlink: 56 bytes leftover after parsing attributes in process `syz.5.347'.
[   71.216682][ T4838] netlink: 56 bytes leftover after parsing attributes in process `syz.5.349'.
[   71.358841][ T4845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.379649][ T4845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.413465][ T4816] delete_channel: no stack
[   71.564957][ T4857] netlink: 'syz.6.357': attribute type 10 has an invalid length.
[   71.594419][ T4857] team0: Device ipvlan0 failed to register rx_handler
[   71.610768][ T4860] netlink: 56 bytes leftover after parsing attributes in process `syz.3.355'.
[   71.678831][ T4864] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   72.335873][ T4894] netlink: 'syz.3.371': attribute type 10 has an invalid length.
[   72.401769][ T4894] team0: Device ipvlan0 failed to register rx_handler
[   72.499293][ T4896] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   72.873922][ T4881] delete_channel: no stack
[   72.894326][ T4859] syz.5.358 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   72.908577][ T4859] CPU: 0 UID: 0 PID: 4859 Comm: syz.5.358 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[   72.908613][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   72.908629][ T4859] Call Trace:
[   72.908636][ T4859]  <TASK>
[   72.908646][ T4859]  __dump_stack+0x1d/0x30
[   72.908738][ T4859]  dump_stack_lvl+0xe8/0x140
[   72.908891][ T4859]  dump_stack+0x15/0x1b
[   72.908914][ T4859]  dump_header+0x81/0x220
[   72.908947][ T4859]  oom_kill_process+0x342/0x400
[   72.908980][ T4859]  out_of_memory+0x979/0xb80
[   72.909063][ T4859]  try_charge_memcg+0x5e6/0x9e0
[   72.909104][ T4859]  obj_cgroup_charge_pages+0xa6/0x150
[   72.909144][ T4859]  __memcg_kmem_charge_page+0x9f/0x170
[   72.909188][ T4859]  __alloc_frozen_pages_noprof+0x188/0x360
[   72.909293][ T4859]  alloc_pages_mpol+0xb3/0x250
[   72.909338][ T4859]  alloc_pages_noprof+0x90/0x130
[   72.909385][ T4859]  __vmalloc_node_range_noprof+0x6f2/0xe00
[   72.909432][ T4859]  __kvmalloc_node_noprof+0x30f/0x4e0
[   72.909520][ T4859]  ? ip_set_alloc+0x1f/0x30
[   72.909556][ T4859]  ? ip_set_alloc+0x1f/0x30
[   72.909639][ T4859]  ? __kmalloc_cache_noprof+0x189/0x320
[   72.909669][ T4859]  ip_set_alloc+0x1f/0x30
[   72.909716][ T4859]  hash_netiface_create+0x282/0x740
[   72.909758][ T4859]  ? __pfx_hash_netiface_create+0x10/0x10
[   72.909799][ T4859]  ip_set_create+0x3cc/0x960
[   72.909898][ T4859]  ? __nla_parse+0x40/0x60
[   72.909921][ T4859]  nfnetlink_rcv_msg+0x4c6/0x590
[   72.910010][ T4859]  netlink_rcv_skb+0x120/0x220
[   72.910089][ T4859]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   72.910134][ T4859]  nfnetlink_rcv+0x16b/0x1690
[   72.910207][ T4859]  ? nlmon_xmit+0x4f/0x60
[   72.910239][ T4859]  ? consume_skb+0x49/0x150
[   72.910269][ T4859]  ? nlmon_xmit+0x4f/0x60
[   72.910290][ T4859]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   72.910462][ T4859]  ? __dev_queue_xmit+0x1200/0x2000
[   72.910495][ T4859]  ? __dev_queue_xmit+0x182/0x2000
[   72.910540][ T4859]  ? ref_tracker_free+0x37d/0x3e0
[   72.910605][ T4859]  ? __netlink_deliver_tap+0x4dc/0x500
[   72.910654][ T4859]  netlink_unicast+0x5c0/0x690
[   72.910775][ T4859]  netlink_sendmsg+0x58b/0x6b0
[   72.910822][ T4859]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.910919][ T4859]  __sock_sendmsg+0x142/0x180
[   72.910944][ T4859]  ____sys_sendmsg+0x31e/0x4e0
[   72.910980][ T4859]  ___sys_sendmsg+0x17b/0x1d0
[   72.911043][ T4859]  __x64_sys_sendmsg+0xd4/0x160
[   72.911162][ T4859]  x64_sys_call+0x191e/0x2ff0
[   72.911191][ T4859]  do_syscall_64+0xd2/0x200
[   72.911222][ T4859]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   72.911302][ T4859]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   72.911393][ T4859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.911415][ T4859] RIP: 0033:0x7f3385d9eb69
[   72.911431][ T4859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.911448][ T4859] RSP: 002b:00007f3384407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   72.911471][ T4859] RAX: ffffffffffffffda RBX: 00007f3385fc5fa0 RCX: 00007f3385d9eb69
[   72.911488][ T4859] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008
[   72.911549][ T4859] RBP: 00007f3385e21df1 R08: 0000000000000000 R09: 0000000000000000
[   72.911560][ T4859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.911572][ T4859] R13: 0000000000000000 R14: 00007f3385fc5fa0 R15: 00007ffd3918b278
[   72.911592][ T4859]  </TASK>
[   72.911600][ T4859] memory: usage 307200kB, limit 307200kB, failcnt 1316
[   73.251739][ T4859] memory+swap: usage 307868kB, limit 9007199254740988kB, failcnt 0
[   73.259704][ T4859] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[   73.267047][ T4859] Memory cgroup stats for /syz5:
[   73.276869][ T4919] netlink: 'syz.1.383': attribute type 10 has an invalid length.
[   73.278037][ T4921] netlink: 'syz.6.384': attribute type 10 has an invalid length.
[   73.304493][ T4859] cache 0
[   73.307476][ T4859] rss 4096
[   73.310653][ T4859] shmem 0
[   73.313618][ T4859] mapped_file 0
[   73.317089][ T4859] dirty 0
[   73.320117][ T4859] writeback 0
[   73.323419][ T4859] workingset_refault_anon 113
[   73.328376][ T4859] workingset_refault_file 83
[   73.332980][ T4859] swap 684032
[   73.336283][ T4859] swapcached 16384
[   73.340037][ T4859] pgpgin 27978
[   73.342392][ T4919] team0: Device ipvlan0 failed to register rx_handler
[   73.343420][ T4859] pgpgout 27973
[   73.343431][ T4859] pgfault 34668
[   73.343440][ T4859] pgmajfault 45
[   73.343449][ T4859] inactive_anon 16384
[   73.343531][ T4859] active_anon 0
[   73.343541][ T4859] inactive_file 4096
[   73.343550][ T4859] active_file 0
[   73.343559][ T4859] unevictable 0
[   73.343568][ T4859] hierarchical_memory_limit 314572800
[   73.343580][ T4859] hierarchical_memsw_limit 9223372036854771712
[   73.343592][ T4859] total_cache 0
[   73.343639][ T4859] total_rss 4096
[   73.343645][ T4859] total_shmem 0
[   73.343651][ T4859] total_mapped_file 0
[   73.343658][ T4859] total_dirty 0
[   73.343681][ T4859] total_writeback 0
[   73.343690][ T4859] total_workingset_refault_anon 113
[   73.343702][ T4859] total_workingset_refault_file 83
[   73.343713][ T4859] total_swap 684032
[   73.343722][ T4859] total_swapcached 16384
[   73.343732][ T4859] total_pgpgin 27978
[   73.343742][ T4859] total_pgpgout 27973
[   73.403317][ T4926] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   73.405429][ T4859] total_pgfault 34668
[   73.405442][ T4859] total_pgmajfault 45
[   73.405452][ T4859] total_inactive_anon 16384
[   73.437742][ T4921] team0: Device ipvlan0 failed to register rx_handler
[   73.439236][ T4859] total_active_anon 0
[   73.439248][ T4859] total_inactive_file 4096
[   73.482769][ T4859] total_active_file 0
[   73.486897][ T4859] total_unevictable 0
[   73.490998][ T4859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.358,pid=4858,uid=0
[   73.505627][ T4859] Memory cgroup out of memory: Killed process 4858 (syz.5.358) total-vm:95944kB, anon-rss:944kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   73.553123][ T4930] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   73.714802][ T4859] syz.5.358 (4859) used greatest stack depth: 6360 bytes left
[   73.962454][   T29] kauditd_printk_skb: 293 callbacks suppressed
[   73.962505][   T29] audit: type=1400 audit(1754160130.798:1924): avc:  denied  { firmware_load } for  pid=4935 comm="syz.3.390" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   74.360814][   T29] audit: type=1400 audit(1754160131.268:1925): avc:  denied  { allowed } for  pid=4953 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   74.404688][   T29] audit: type=1400 audit(1754160131.288:1926): avc:  denied  { create } for  pid=4953 comm="syz.1.395" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   74.426041][   T29] audit: type=1400 audit(1754160131.288:1927): avc:  denied  { map } for  pid=4953 comm="syz.1.395" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   74.450245][   T29] audit: type=1400 audit(1754160131.288:1928): avc:  denied  { create } for  pid=4958 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.469873][   T29] audit: type=1400 audit(1754160131.288:1929): avc:  denied  { read write } for  pid=4953 comm="syz.1.395" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   74.494765][   T29] audit: type=1400 audit(1754160131.288:1930): avc:  denied  { write } for  pid=4958 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.514172][   T29] audit: type=1400 audit(1754160131.298:1931): avc:  denied  { open } for  pid=4958 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   74.533418][   T29] audit: type=1400 audit(1754160131.298:1932): avc:  denied  { perfmon } for  pid=4958 comm="syz.4.397" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   74.554439][   T29] audit: type=1400 audit(1754160131.298:1933): avc:  denied  { kernel } for  pid=4958 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   74.622681][ T4941] delete_channel: no stack
[   74.684900][ T4974] siw: device registration error -23
[   74.709835][ T4975] __nla_validate_parse: 14 callbacks suppressed
[   74.709852][ T4975] netlink: 56 bytes leftover after parsing attributes in process `syz.4.398'.
[   74.900659][ T4996] netlink: 'syz.6.408': attribute type 10 has an invalid length.
[   74.935701][ T4996] team0: Device ipvlan0 failed to register rx_handler
[   74.988764][ T5000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.411'.
[   75.166014][ T5006] siw: device registration error -23
[   75.814540][ T4998] delete_channel: no stack
[   75.947755][ T5041] siw: device registration error -23
[   75.986345][ T5049] siw: device registration error -23
[   76.103241][ T5059] netlink: 'syz.5.435': attribute type 10 has an invalid length.
[   76.145797][ T5059] team0: Device ipvlan0 failed to register rx_handler
[   76.154683][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.436'.
[   76.433417][ T5070] netlink: 'syz.5.439': attribute type 10 has an invalid length.
[   76.456538][ T5070] team0: Device ipvlan0 failed to register rx_handler
[   76.818273][ T5080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.444'.
[   76.934177][ T5084] netlink: 'syz.3.446': attribute type 10 has an invalid length.
[   76.990781][ T5060] delete_channel: no stack
[   76.995722][ T5084] team0: Device ipvlan0 failed to register rx_handler
[   77.450837][ T5099] netlink: 56 bytes leftover after parsing attributes in process `syz.1.450'.
[   77.788515][ T5109] netlink: 56 bytes leftover after parsing attributes in process `syz.1.453'.
[   77.807689][ T5111] siw: device registration error -23
[   77.882300][ T5116] siw: device registration error -23
[   78.766025][ T5126] netlink: 'syz.3.459': attribute type 10 has an invalid length.
[   78.818119][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.461'.
[   78.827409][ T5126] team0: Device ipvlan0 failed to register rx_handler
[   79.084534][ T5148] netlink: 'syz.6.467': attribute type 10 has an invalid length.
[   79.102713][ T5148] team0: Device ipvlan0 failed to register rx_handler
[   79.316307][   T29] kauditd_printk_skb: 1394 callbacks suppressed
[   79.316326][   T29] audit: type=1400 audit(1754160136.198:3328): avc:  denied  { read write } for  pid=5139 comm="syz.1.465" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   79.346899][   T29] audit: type=1400 audit(1754160136.198:3329): avc:  denied  { open } for  pid=5139 comm="syz.1.465" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   79.697389][ T5129] delete_channel: no stack
[   79.775511][ T5159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.470'.
[   79.775570][   T29] audit: type=1400 audit(1754160136.678:3330): avc:  denied  { create } for  pid=5158 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   79.785101][ T5159] netlink: 216 bytes leftover after parsing attributes in process `syz.4.470'.
[   79.803870][   T29] audit: type=1400 audit(1754160136.678:3331): avc:  denied  { ioctl } for  pid=5158 comm="syz.4.470" path="socket:[10691]" dev="sockfs" ino=10691 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   79.813372][ T5159] netlink: 216 bytes leftover after parsing attributes in process `syz.4.470'.
[   79.847576][ T5159] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   79.966328][   T29] audit: type=1326 audit(1754160136.858:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   80.035990][ T5169] netlink: 'syz.6.475': attribute type 10 has an invalid length.
[   80.046184][   T29] audit: type=1326 audit(1754160136.898:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   80.069751][   T29] audit: type=1326 audit(1754160136.898:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   80.089823][ T5174] netlink: 56 bytes leftover after parsing attributes in process `syz.4.476'.
[   80.093178][   T29] audit: type=1326 audit(1754160136.898:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   80.125632][   T29] audit: type=1326 audit(1754160136.898:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   80.149029][   T29] audit: type=1326 audit(1754160136.898:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[   80.165623][ T5169] team0: Device ipvlan0 failed to register rx_handler
[   80.218966][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'.
[   80.353589][ T5191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.483'.
[   80.500453][ T5200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.594847][ T5200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.032684][ T5208] siw: device registration error -23
[   81.042449][ T5209] netlink: 'syz.4.486': attribute type 10 has an invalid length.
[   81.104296][ T5209] team0: Device ipvlan0 failed to register rx_handler
[   81.250622][ T5190] delete_channel: no stack
[   81.410779][ T5218] netlink: 'syz.5.491': attribute type 10 has an invalid length.
[   81.468636][ T5218] team0: Device ipvlan0 failed to register rx_handler
[   81.620468][ T5221] siw: device registration error -23
[   82.476858][ T5250] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.594341][ T5256] netlink: 'syz.4.502': attribute type 10 has an invalid length.
[   82.663632][ T5256] team0: Device ipvlan0 failed to register rx_handler
[   82.694982][ T5260] siw: device registration error -23
[   83.207379][ T5269] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   83.730838][ T5293] netlink: 'syz.6.519': attribute type 10 has an invalid length.
[   83.764049][ T5293] team0: Device ipvlan0 failed to register rx_handler
[   84.179716][ T5304] netlink: 32 bytes leftover after parsing attributes in process `syz.5.522'.
[   84.267664][ T5306] netlink: 32 bytes leftover after parsing attributes in process `syz.6.524'.
[   84.352194][   T29] kauditd_printk_skb: 162 callbacks suppressed
[   84.352211][   T29] audit: type=1400 audit(1754160141.258:3500): avc:  denied  { block_suspend } for  pid=5310 comm="syz.3.526" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   84.387021][   T29] audit: type=1400 audit(1754160141.288:3501): avc:  denied  { create } for  pid=5310 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.408933][ T5312] netlink: 56 bytes leftover after parsing attributes in process `syz.3.526'.
[   84.430647][ T5315] netlink: 'syz.5.527': attribute type 10 has an invalid length.
[   84.439527][   T29] audit: type=1400 audit(1754160141.318:3502): avc:  denied  { write } for  pid=5310 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.459691][   T29] audit: type=1400 audit(1754160141.318:3503): avc:  denied  { nlmsg_write } for  pid=5310 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.471655][ T5315] team0: Device ipvlan0 failed to register rx_handler
[   84.480473][   T29] audit: type=1400 audit(1754160141.338:3504): avc:  denied  { read } for  pid=5310 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   84.689983][   T29] audit: type=1326 audit(1754160141.578:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4cf6eb69 code=0x7ffc0000
[   84.713514][   T29] audit: type=1326 audit(1754160141.578:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4cf6eb69 code=0x7ffc0000
[   84.737013][   T29] audit: type=1326 audit(1754160141.578:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4cf6eb69 code=0x7ffc0000
[   84.760391][   T29] audit: type=1326 audit(1754160141.578:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4cf6eb69 code=0x7ffc0000
[   84.783820][   T29] audit: type=1326 audit(1754160141.578:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4cf6eb69 code=0x7ffc0000
[   84.821916][ T5325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.532'.
[   85.005603][ T5334] netlink: 'syz.6.535': attribute type 10 has an invalid length.
[   85.057666][ T5335] netlink: 'syz.4.534': attribute type 10 has an invalid length.
[   85.141709][ T5334] team0: Device ipvlan0 failed to register rx_handler
[   85.217086][ T5335] team0: Device ipvlan0 failed to register rx_handler
[   85.495197][ T5356] netlink: 32 bytes leftover after parsing attributes in process `syz.6.543'.
[   85.506233][ T5356] netlink: 216 bytes leftover after parsing attributes in process `syz.6.543'.
[   85.515303][ T5356] netlink: 216 bytes leftover after parsing attributes in process `syz.6.543'.
[   85.524368][ T5356] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   86.067087][ T5324] delete_channel: no stack
[   86.252656][ T5375] netlink: 'syz.1.548': attribute type 10 has an invalid length.
[   86.284074][ T5372] netlink: 'syz.3.549': attribute type 10 has an invalid length.
[   86.421126][ T5372] team0: Device ipvlan0 failed to register rx_handler
[   86.470201][ T5385] netlink: 32 bytes leftover after parsing attributes in process `syz.5.553'.
[   86.529082][ T5375] team0: Device ipvlan0 failed to register rx_handler
[   86.631163][ T5392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.556'.
[   87.320396][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[   87.726557][ T5414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.904009][ T5414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.993965][ T5391] delete_channel: no stack
[   88.232618][ T5423] netlink: 32 bytes leftover after parsing attributes in process `syz.4.564'.
[   88.324020][ T5425] netlink: 'syz.6.565': attribute type 10 has an invalid length.
[   88.349196][ T5431] siw: device registration error -23
[   88.363941][ T5425] team0: Device ipvlan0 failed to register rx_handler
[   89.200651][ T5456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.577'.
[   89.327252][ T5466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.581'.
[   89.389129][   T29] kauditd_printk_skb: 443 callbacks suppressed
[   89.389144][   T29] audit: type=1400 audit(1754160146.298:3953): avc:  denied  { unmount } for  pid=3694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   89.427674][   T29] audit: type=1400 audit(1754160146.328:3954): avc:  denied  { create } for  pid=5464 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   89.441592][ T5466] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   89.458162][   T29] audit: type=1400 audit(1754160146.328:3955): avc:  denied  { write } for  pid=5464 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   89.482343][   T29] audit: type=1400 audit(1754160146.328:3956): avc:  denied  { connect } for  pid=5464 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   89.501951][   T29] audit: type=1400 audit(1754160146.328:3957): avc:  denied  { name_connect } for  pid=5464 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   89.522429][   T29] audit: type=1400 audit(1754160146.358:3958): avc:  denied  { read } for  pid=5469 comm="syz.6.583" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   89.545484][   T29] audit: type=1400 audit(1754160146.358:3959): avc:  denied  { open } for  pid=5469 comm="syz.6.583" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   89.568919][   T29] audit: type=1400 audit(1754160146.358:3960): avc:  denied  { firmware_load } for  pid=3745 comm="kworker/u8:8" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   89.716847][ T5477] netlink: 'syz.4.585': attribute type 10 has an invalid length.
[   89.771415][ T5477] team0: Device ipvlan0 failed to register rx_handler
[   89.867653][ T5481] siw: device registration error -23
[   89.882388][   T29] audit: type=1400 audit(1754160146.768:3961): avc:  denied  { create } for  pid=5480 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   89.901968][   T29] audit: type=1400 audit(1754160146.768:3962): avc:  denied  { connect } for  pid=5480 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   91.938615][ T5540] __nla_validate_parse: 2 callbacks suppressed
[   91.938632][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'.
[   92.398522][ T5566] lo speed is unknown, defaulting to 1000
[   92.409562][ T5572] netlink: 'syz.1.617': attribute type 13 has an invalid length.
[   92.417473][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'.
[   92.438311][ T5566] lo speed is unknown, defaulting to 1000
[   92.444649][ T5566] lo speed is unknown, defaulting to 1000
[   92.454728][ T5566] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   92.476670][ T5566] lo speed is unknown, defaulting to 1000
[   92.503476][ T5566] lo speed is unknown, defaulting to 1000
[   92.510478][ T5566] lo speed is unknown, defaulting to 1000
[   92.516967][ T5566] lo speed is unknown, defaulting to 1000
[   92.524640][ T5566] lo speed is unknown, defaulting to 1000
[   92.531071][ T5566] lo speed is unknown, defaulting to 1000
[   92.537416][ T5566] lo speed is unknown, defaulting to 1000
[   92.545111][ T5566] lo speed is unknown, defaulting to 1000
[   92.552897][ T5566] lo speed is unknown, defaulting to 1000
[   92.561369][ T5566] lo speed is unknown, defaulting to 1000
[   92.567664][ T5566] lo speed is unknown, defaulting to 1000
[   92.597776][ T5577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.619'.
[   92.607934][ T5577] netlink: 216 bytes leftover after parsing attributes in process `syz.4.619'.
[   92.617008][ T5577] netlink: 216 bytes leftover after parsing attributes in process `syz.4.619'.
[   92.626106][ T5577] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   93.992096][ T5629] netlink: 'syz.6.636': attribute type 10 has an invalid length.
[   94.103969][ T5629] team0: Device ipvlan0 failed to register rx_handler
[   94.271027][ T5641] program syz.5.641 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.522523][ T5652] lo speed is unknown, defaulting to 1000
[   94.544098][   T29] kauditd_printk_skb: 71 callbacks suppressed
[   94.544112][   T29] audit: type=1326 audit(1754160151.448:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[   94.573764][   T29] audit: type=1326 audit(1754160151.448:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[   94.597199][   T29] audit: type=1326 audit(1754160151.448:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3385d9d4d0 code=0x7ffc0000
[   94.620684][   T29] audit: type=1326 audit(1754160151.448:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[   94.644173][   T29] audit: type=1326 audit(1754160151.448:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[   94.668013][   T29] audit: type=1326 audit(1754160151.448:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[   94.691384][   T29] audit: type=1326 audit(1754160151.448:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[   94.714837][   T29] audit: type=1326 audit(1754160151.448:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[   94.782962][   T29] audit: type=1400 audit(1754160151.688:4042): avc:  denied  { read } for  pid=5660 comm="syz.5.649" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.805830][   T29] audit: type=1400 audit(1754160151.688:4043): avc:  denied  { open } for  pid=5660 comm="syz.5.649" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   96.398863][ T5691] mmap: syz.3.654 (5691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   98.012136][ T5757] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   98.469758][ T5790] tmpfs: Bad value for 'mpol'
[   98.927936][ T5792] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   99.246411][ T5826] siw: device registration error -23
[   99.553017][   T29] kauditd_printk_skb: 190 callbacks suppressed
[   99.553036][   T29] audit: type=1326 audit(1754160156.458:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a4cf65b27 code=0x7ffc0000
[   99.972097][   T29] audit: type=1400 audit(1754160156.488:4235): avc:  denied  { create } for  pid=5834 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   99.992647][   T29] audit: type=1400 audit(1754160156.498:4236): avc:  denied  { write } for  pid=5834 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  100.013242][   T29] audit: type=1400 audit(1754160156.498:4237): avc:  denied  { read } for  pid=5834 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  100.033568][   T29] audit: type=1400 audit(1754160156.508:4238): avc:  denied  { mounton } for  pid=5834 comm="syz.4.706" path="/118/file0" dev="tmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  100.056158][   T29] audit: type=1400 audit(1754160156.508:4239): avc:  denied  { mount } for  pid=5834 comm="syz.4.706" name="/" dev="hugetlbfs" ino=12970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  100.079221][   T29] audit: type=1400 audit(1754160156.508:4240): avc:  denied  { mounton } for  pid=5834 comm="syz.4.706" path="/118/file0" dev="hugetlbfs" ino=12970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[  100.102211][   T29] audit: type=1400 audit(1754160156.518:4241): avc:  denied  { module_request } for  pid=5834 comm="syz.4.706" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  100.123928][   T29] audit: type=1326 audit(1754160156.528:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a4cf0ad69 code=0x7ffc0000
[  100.147295][   T29] audit: type=1326 audit(1754160156.528:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a4cf65b27 code=0x7ffc0000
[  100.338805][ T5864] netlink: 'syz.3.717': attribute type 10 has an invalid length.
[  100.442483][ T5864] team0: Device ipvlan0 failed to register rx_handler
[  100.495474][ T5876] netlink: 'syz.5.720': attribute type 10 has an invalid length.
[  100.523982][ T5876] team0: Device ipvlan0 failed to register rx_handler
[  100.634523][ T5892] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  100.674192][ T5896] netlink: 'syz.4.724': attribute type 10 has an invalid length.
[  100.685575][ T5896] team0: Device ipvlan0 failed to register rx_handler
[  100.892919][ T5900] siw: device registration error -23
[  101.463588][ T5918] netlink: 'syz.1.733': attribute type 10 has an invalid length.
[  101.536259][ T5918] team0: Device ipvlan0 failed to register rx_handler
[  101.988230][ T5941] siw: device registration error -23
[  103.538914][ T5963] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  103.734723][ T5983] siw: device registration error -23
[  103.821453][ T5985] siw: device registration error -23
[  104.558170][   T29] kauditd_printk_skb: 759 callbacks suppressed
[  104.558185][   T29] audit: type=1326 audit(1754160161.468:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3385d95b27 code=0x7ffc0000
[  104.672874][   T29] audit: type=1326 audit(1754160161.548:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3385d3ad69 code=0x7ffc0000
[  104.697494][   T29] audit: type=1326 audit(1754160161.548:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3385d95b27 code=0x7ffc0000
[  104.720847][   T29] audit: type=1326 audit(1754160161.548:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3385d3ad69 code=0x7ffc0000
[  104.744199][   T29] audit: type=1326 audit(1754160161.548:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[  104.767551][   T29] audit: type=1326 audit(1754160161.558:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3385d95b27 code=0x7ffc0000
[  104.791004][   T29] audit: type=1326 audit(1754160161.558:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3385d3ad69 code=0x7ffc0000
[  104.815373][   T29] audit: type=1326 audit(1754160161.558:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3385d9eb69 code=0x7ffc0000
[  104.838731][   T29] audit: type=1326 audit(1754160161.558:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a4cf65b27 code=0x7ffc0000
[  104.862171][   T29] audit: type=1326 audit(1754160161.558:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a4cf0ad69 code=0x7ffc0000
[  105.653325][ T6015] lo speed is unknown, defaulting to 1000
[  106.844743][ T6052] siw: device registration error -23
[  106.995895][ T6061] netlink: 'syz.1.775': attribute type 10 has an invalid length.
[  107.023848][ T6061] team0: Device ipvlan0 failed to register rx_handler
[  107.132665][ T6068] lo speed is unknown, defaulting to 1000
[  107.473032][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'.
[  107.481998][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'.
[  108.101777][ T6103] lo speed is unknown, defaulting to 1000
[  108.845173][ T6127] siw: device registration error -23
[  108.852790][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.865977][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.153327][ T6144] netlink: 'syz.5.802': attribute type 10 has an invalid length.
[  109.169220][ T6144] team0: Device ipvlan0 failed to register rx_handler
[  109.858083][   T29] kauditd_printk_skb: 134 callbacks suppressed
[  109.858100][   T29] audit: type=1400 audit(1754160166.748:5145): avc:  denied  { watch watch_reads } for  pid=6154 comm="syz.1.808" path="/172" dev="tmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  109.887208][   T29] audit: type=1400 audit(1754160166.758:5146): avc:  denied  { create } for  pid=6154 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  110.602516][ T6159] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  110.905526][ T6176] FAULT_INJECTION: forcing a failure.
[  110.905526][ T6176] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  110.919814][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: syz.3.814 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[  110.919863][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  110.919879][ T6176] Call Trace:
[  110.919887][ T6176]  <TASK>
[  110.919942][ T6176]  __dump_stack+0x1d/0x30
[  110.919969][ T6176]  dump_stack_lvl+0xe8/0x140
[  110.919990][ T6176]  dump_stack+0x15/0x1b
[  110.920010][ T6176]  should_fail_ex+0x265/0x280
[  110.920054][ T6176]  should_fail_alloc_page+0xf2/0x100
[  110.920094][ T6176]  __alloc_frozen_pages_noprof+0xff/0x360
[  110.920131][ T6176]  alloc_pages_mpol+0xb3/0x250
[  110.920216][ T6176]  alloc_migration_target_by_mpol+0x11b/0x280
[  110.920257][ T6176]  migrate_pages_batch+0x300/0x1a30
[  110.920288][ T6176]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  110.920317][ T6176]  ? __walk_page_range+0x324/0x340
[  110.920408][ T6176]  ? mas_ascend+0x1e9/0x560
[  110.920441][ T6176]  migrate_pages+0xf5f/0x1770
[  110.920471][ T6176]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  110.920559][ T6176]  __se_sys_mbind+0x975/0xac0
[  110.920626][ T6176]  __x64_sys_mbind+0x78/0x90
[  110.920664][ T6176]  x64_sys_call+0x2932/0x2ff0
[  110.920692][ T6176]  do_syscall_64+0xd2/0x200
[  110.920785][ T6176]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  110.920817][ T6176]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  110.920843][ T6176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.920884][ T6176] RIP: 0033:0x7f95e6d6eb69
[  110.920918][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.920941][ T6176] RSP: 002b:00007f95e53cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  110.921009][ T6176] RAX: ffffffffffffffda RBX: 00007f95e6f95fa0 RCX: 00007f95e6d6eb69
[  110.921021][ T6176] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  110.921034][ T6176] RBP: 00007f95e53cf090 R08: 0000000000000000 R09: 0000000000000002
[  110.921046][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.921057][ T6176] R13: 0000000000000001 R14: 00007f95e6f95fa0 R15: 00007fffd5438d48
[  110.921158][ T6176]  </TASK>
[  111.311530][   T29] audit: type=1326 audit(1754160168.218:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e6d6eb69 code=0x7ffc0000
[  111.354429][   T29] audit: type=1326 audit(1754160168.238:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e6d6eb69 code=0x7ffc0000
[  111.378007][   T29] audit: type=1326 audit(1754160168.238:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95e6d6d4d0 code=0x7ffc0000
[  111.401631][   T29] audit: type=1326 audit(1754160168.238:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e6d6eb69 code=0x7ffc0000
[  111.425041][   T29] audit: type=1326 audit(1754160168.238:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e6d6eb69 code=0x7ffc0000
[  111.448458][   T29] audit: type=1326 audit(1754160168.238:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f95e6d6eb69 code=0x7ffc0000
[  111.471882][   T29] audit: type=1326 audit(1754160168.238:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e6d6eb69 code=0x7ffc0000
[  111.495253][   T29] audit: type=1326 audit(1754160168.238:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e6d6eb69 code=0x7ffc0000
[  111.986261][ T6208] FAULT_INJECTION: forcing a failure.
[  111.986261][ T6208] name fail_futex, interval 1, probability 0, space 0, times 1
[  111.999212][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.6.826 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[  111.999244][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  111.999256][ T6208] Call Trace:
[  111.999271][ T6208]  <TASK>
[  111.999279][ T6208]  __dump_stack+0x1d/0x30
[  111.999300][ T6208]  dump_stack_lvl+0xe8/0x140
[  111.999323][ T6208]  dump_stack+0x15/0x1b
[  111.999344][ T6208]  should_fail_ex+0x265/0x280
[  111.999466][ T6208]  should_fail+0xb/0x20
[  111.999499][ T6208]  get_futex_key+0x130/0xbd0
[  111.999532][ T6208]  futex_requeue+0x1c3/0x13c0
[  111.999643][ T6208]  do_futex+0x2ec/0x380
[  111.999676][ T6208]  __se_sys_futex+0x2ed/0x360
[  111.999712][ T6208]  __x64_sys_futex+0x78/0x90
[  111.999786][ T6208]  x64_sys_call+0x2e39/0x2ff0
[  111.999812][ T6208]  do_syscall_64+0xd2/0x200
[  111.999847][ T6208]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  111.999876][ T6208]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  111.999950][ T6208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.999975][ T6208] RIP: 0033:0x7f1a4cf6eb69
[  111.999995][ T6208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.000014][ T6208] RSP: 002b:00007f1a4b5cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  112.000033][ T6208] RAX: ffffffffffffffda RBX: 00007f1a4d195fa0 RCX: 00007f1a4cf6eb69
[  112.000044][ T6208] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc
[  112.000055][ T6208] RBP: 00007f1a4b5cf090 R08: 0000200000048000 R09: 0000000000000000
[  112.000093][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.000109][ T6208] R13: 0000000000000001 R14: 00007f1a4d195fa0 R15: 00007ffe41916798
[  112.000135][ T6208]  </TASK>
[  113.013589][ T6235] siw: device registration error -23
[  113.109237][ T6238] netlink: 'syz.5.835': attribute type 10 has an invalid length.
[  113.150785][ T6238] team0: Device ipvlan0 failed to register rx_handler
[  113.350115][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.841'.
[  113.384971][ T6256] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  114.205879][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.254195][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.391091][ T6289] siw: device registration error -23
[  114.756290][ T6300] siw: device registration error -23
[  114.780123][ T6305] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  115.857990][ T6320] siw: device registration error -23
[  115.936890][ T6339] netlink: 'syz.5.869': attribute type 10 has an invalid length.
[  116.007522][ T6339] team0: Device ipvlan0 failed to register rx_handler
[  116.540957][ T6345] lo speed is unknown, defaulting to 1000
[  116.608083][   T29] kauditd_printk_skb: 74 callbacks suppressed
[  116.608100][   T29] audit: type=1400 audit(1754160173.508:5229): avc:  denied  { map } for  pid=6343 comm="syz.5.870" path="socket:[15437]" dev="sockfs" ino=15437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  116.638223][   T29] audit: type=1400 audit(1754160173.508:5230): avc:  denied  { read } for  pid=6343 comm="syz.5.870" path="socket:[15437]" dev="sockfs" ino=15437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  116.845685][   T29] audit: type=1326 audit(1754160173.748:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.1.874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc24eb5eb69 code=0x0
[  117.168481][ T6366] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  117.391613][   T29] audit: type=1326 audit(1754160174.298:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  117.415978][   T29] audit: type=1326 audit(1754160174.298:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  117.439440][   T29] audit: type=1326 audit(1754160174.298:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  117.462773][   T29] audit: type=1326 audit(1754160174.298:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  117.486194][   T29] audit: type=1326 audit(1754160174.298:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  117.509631][   T29] audit: type=1326 audit(1754160174.298:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  117.533002][   T29] audit: type=1326 audit(1754160174.298:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  117.659686][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.878'.
[  117.668586][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.878'.
[  117.735410][ T6382] netlink: 'syz.4.881': attribute type 10 has an invalid length.
[  117.797262][ T6382] team0: Device ipvlan0 failed to register rx_handler
[  119.312405][ T6423] FAULT_INJECTION: forcing a failure.
[  119.312405][ T6423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.325557][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.6.894 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[  119.325649][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  119.325661][ T6423] Call Trace:
[  119.325667][ T6423]  <TASK>
[  119.325677][ T6423]  __dump_stack+0x1d/0x30
[  119.325704][ T6423]  dump_stack_lvl+0xe8/0x140
[  119.325729][ T6423]  dump_stack+0x15/0x1b
[  119.325750][ T6423]  should_fail_ex+0x265/0x280
[  119.325796][ T6423]  should_fail+0xb/0x20
[  119.325832][ T6423]  should_fail_usercopy+0x1a/0x20
[  119.325856][ T6423]  _copy_from_user+0x1c/0xb0
[  119.325941][ T6423]  ___sys_sendmsg+0xc1/0x1d0
[  119.326007][ T6423]  __x64_sys_sendmsg+0xd4/0x160
[  119.326110][ T6423]  x64_sys_call+0x191e/0x2ff0
[  119.326136][ T6423]  do_syscall_64+0xd2/0x200
[  119.326221][ T6423]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  119.326286][ T6423]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  119.326314][ T6423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.326356][ T6423] RIP: 0033:0x7f1a4cf6eb69
[  119.326375][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.326398][ T6423] RSP: 002b:00007f1a4b5cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.326417][ T6423] RAX: ffffffffffffffda RBX: 00007f1a4d195fa0 RCX: 00007f1a4cf6eb69
[  119.326429][ T6423] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009
[  119.326457][ T6423] RBP: 00007f1a4b5cf090 R08: 0000000000000000 R09: 0000000000000000
[  119.326468][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.326481][ T6423] R13: 0000000000000000 R14: 00007f1a4d195fa0 R15: 00007ffe41916798
[  119.326505][ T6423]  </TASK>
[  119.562987][ T6428] lo speed is unknown, defaulting to 1000
[  119.622636][ T6432] netlink: 'syz.5.899': attribute type 10 has an invalid length.
[  119.669591][ T6432] team0: Device ipvlan0 failed to register rx_handler
[  119.683108][ T6442] netlink: 'syz.6.902': attribute type 1 has an invalid length.
[  119.792636][ T6447] netlink: 'syz.4.901': attribute type 10 has an invalid length.
[  119.825166][ T6447] team0: Device ipvlan0 failed to register rx_handler
[  119.858540][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.6.902'.
[  120.152948][ T6462] 9pnet_fd: Insufficient options for proto=fd
[  120.441430][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.478115][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.600536][ T6472] FAULT_INJECTION: forcing a failure.
[  120.600536][ T6472] name failslab, interval 1, probability 0, space 0, times 0
[  120.613328][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.3.912 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[  120.613365][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  120.613405][ T6472] Call Trace:
[  120.613410][ T6472]  <TASK>
[  120.613417][ T6472]  __dump_stack+0x1d/0x30
[  120.613441][ T6472]  dump_stack_lvl+0xe8/0x140
[  120.613467][ T6472]  dump_stack+0x15/0x1b
[  120.613488][ T6472]  should_fail_ex+0x265/0x280
[  120.613530][ T6472]  should_failslab+0x8c/0xb0
[  120.613581][ T6472]  __kvmalloc_node_noprof+0x123/0x4e0
[  120.613635][ T6472]  ? alloc_netdev_mqs+0xa0/0xa20
[  120.613679][ T6472]  ? __pfx_vti6_dev_setup+0x10/0x10
[  120.613709][ T6472]  alloc_netdev_mqs+0xa0/0xa20
[  120.613759][ T6472]  vti6_locate+0x357/0x440
[  120.613868][ T6472]  vti6_siocdevprivate+0x579/0x8e0
[  120.613916][ T6472]  dev_ifsioc+0x8f8/0xaa0
[  120.613940][ T6472]  dev_ioctl+0x78d/0x960
[  120.613958][ T6472]  sock_ioctl+0x593/0x610
[  120.614017][ T6472]  ? __pfx_sock_ioctl+0x10/0x10
[  120.614037][ T6472]  __se_sys_ioctl+0xcb/0x140
[  120.614071][ T6472]  __x64_sys_ioctl+0x43/0x50
[  120.614178][ T6472]  x64_sys_call+0x1816/0x2ff0
[  120.614206][ T6472]  do_syscall_64+0xd2/0x200
[  120.614230][ T6472]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  120.614253][ T6472]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  120.614320][ T6472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.614420][ T6472] RIP: 0033:0x7f95e6d6eb69
[  120.614435][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.614516][ T6472] RSP: 002b:00007f95e53cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  120.614536][ T6472] RAX: ffffffffffffffda RBX: 00007f95e6f95fa0 RCX: 00007f95e6d6eb69
[  120.614552][ T6472] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006
[  120.614564][ T6472] RBP: 00007f95e53cf090 R08: 0000000000000000 R09: 0000000000000000
[  120.614575][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.614587][ T6472] R13: 0000000000000000 R14: 00007f95e6f95fa0 R15: 00007fffd5438d48
[  120.614611][ T6472]  </TASK>
[  120.932471][ T6476] netlink: 'syz.3.914': attribute type 10 has an invalid length.
[  120.956220][ T6476] team0: Device ipvlan0 failed to register rx_handler
[  121.323083][ T6498] siw: device registration error -23
[  121.480611][ T6507] siw: device registration error -23
[  121.618308][   T29] kauditd_printk_skb: 130 callbacks suppressed
[  121.618325][   T29] audit: type=1326 audit(1754160178.528:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff17b1e5b27 code=0x7ffc0000
[  121.648169][   T29] audit: type=1326 audit(1754160178.528:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff17b18ad69 code=0x7ffc0000
[  121.671499][   T29] audit: type=1326 audit(1754160178.528:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  121.695219][   T29] audit: type=1326 audit(1754160178.558:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff17b1e5b27 code=0x7ffc0000
[  121.718511][   T29] audit: type=1326 audit(1754160178.558:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff17b18ad69 code=0x7ffc0000
[  121.741862][   T29] audit: type=1326 audit(1754160178.558:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  121.765223][   T29] audit: type=1326 audit(1754160178.578:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff17b1e5b27 code=0x7ffc0000
[  121.788461][   T29] audit: type=1326 audit(1754160178.578:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff17b18ad69 code=0x7ffc0000
[  121.811755][   T29] audit: type=1326 audit(1754160178.578:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff17b1eeb69 code=0x7ffc0000
[  121.835202][   T29] audit: type=1326 audit(1754160178.578:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff17b1e5b27 code=0x7ffc0000
[  122.345497][ T6524] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  122.599394][ T6554] siw: device registration error -23
[  122.637537][ T6557] netlink: 3 bytes leftover after parsing attributes in process `syz.5.941'.
[  122.649476][ T6557] 0ªX¹¦À: renamed from caif0
[  122.656059][ T6557] 0ªX¹¦À: entered allmulticast mode
[  122.661454][ T6557] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  122.680081][ T6555] siw: device registration error -23
[  122.745270][ T6565] netlink: 276 bytes leftover after parsing attributes in process `syz.5.943'.
[  122.781895][ T6565] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  122.840779][ T6568] siw: device registration error -23
[  123.164765][ T6583] siw: device registration error -23
[  123.324630][ T6597] lo speed is unknown, defaulting to 1000
[  123.574375][ T6608] siw: device registration error -23
[  123.866901][ T6616] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  123.882107][ T6616] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  124.067586][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.086097][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.656480][ T6640] lo speed is unknown, defaulting to 1000
[  124.716143][ T6642] siw: device registration error -23
[  124.857172][ T6649] siw: device registration error -23
[  125.810904][ T6666] netlink: 3 bytes leftover after parsing attributes in process `syz.1.975'.
[  125.839405][ T6666] 0ªX¹¦À: renamed from caif0
[  125.865115][ T6666] 0ªX¹¦À: entered allmulticast mode
[  125.870476][ T6666] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  125.921952][ T6672] lo speed is unknown, defaulting to 1000
[  126.182220][ T6684] siw: device registration error -23
[  126.315028][ T6701] netlink: 'syz.3.987': attribute type 10 has an invalid length.
[  126.358853][ T6701] team0: Device ipvlan0 failed to register rx_handler
[  126.456655][ T6707] lo speed is unknown, defaulting to 1000
[  126.629355][   T29] kauditd_printk_skb: 1662 callbacks suppressed
[  126.629445][   T29] audit: type=1326 audit(1754160183.538:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc24eb55b27 code=0x7ffc0000
[  126.665925][   T29] audit: type=1326 audit(1754160183.568:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc24eafad69 code=0x7ffc0000
[  126.689468][   T29] audit: type=1326 audit(1754160183.568:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc24eb55b27 code=0x7ffc0000
[  126.712811][   T29] audit: type=1326 audit(1754160183.568:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc24eafad69 code=0x7ffc0000
[  126.736086][   T29] audit: type=1326 audit(1754160183.568:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[  126.760724][   T29] audit: type=1326 audit(1754160183.628:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc24eb55b27 code=0x7ffc0000
[  126.784035][   T29] audit: type=1326 audit(1754160183.628:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc24eafad69 code=0x7ffc0000
[  126.807286][   T29] audit: type=1326 audit(1754160183.628:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc24eb5eb69 code=0x7ffc0000
[  126.830692][   T29] audit: type=1326 audit(1754160183.638:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc24eb55b27 code=0x7ffc0000
[  126.854046][   T29] audit: type=1326 audit(1754160183.638:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.1.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc24eafad69 code=0x7ffc0000
[  127.634199][ T6758] lo speed is unknown, defaulting to 1000
[  127.698258][ T6763] netlink: 'syz.1.1006': attribute type 10 has an invalid length.
[  127.728053][ T6763] team0: Device ipvlan0 failed to register rx_handler
[  128.374895][ T6786] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1013'.
[  128.398692][ T6786] 0ªX¹¦À: renamed from caif0
[  128.405369][ T6786] 0ªX¹¦À: entered allmulticast mode
[  128.410672][ T6786] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  128.950660][ T6754] syz.6.1003 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  128.964916][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.6.1003 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[  128.964952][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  128.965046][ T6754] Call Trace:
[  128.965054][ T6754]  <TASK>
[  128.965064][ T6754]  __dump_stack+0x1d/0x30
[  128.965111][ T6754]  dump_stack_lvl+0xe8/0x140
[  128.965138][ T6754]  dump_stack+0x15/0x1b
[  128.965156][ T6754]  dump_header+0x81/0x220
[  128.965206][ T6754]  oom_kill_process+0x342/0x400
[  128.965244][ T6754]  out_of_memory+0x979/0xb80
[  128.965289][ T6754]  try_charge_memcg+0x5e6/0x9e0
[  128.965375][ T6754]  obj_cgroup_charge_pages+0xa6/0x150
[  128.965436][ T6754]  __memcg_kmem_charge_page+0x9f/0x170
[  128.965476][ T6754]  __alloc_frozen_pages_noprof+0x188/0x360
[  128.965558][ T6754]  alloc_pages_mpol+0xb3/0x250
[  128.965664][ T6754]  alloc_pages_noprof+0x90/0x130
[  128.965708][ T6754]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  128.965758][ T6754]  __kvmalloc_node_noprof+0x30f/0x4e0
[  128.965847][ T6754]  ? ip_set_alloc+0x1f/0x30
[  128.965883][ T6754]  ? ip_set_alloc+0x1f/0x30
[  128.965919][ T6754]  ? __kmalloc_cache_noprof+0x189/0x320
[  128.965960][ T6754]  ip_set_alloc+0x1f/0x30
[  128.966069][ T6754]  hash_netiface_create+0x282/0x740
[  128.966108][ T6754]  ? __pfx_hash_netiface_create+0x10/0x10
[  128.966175][ T6754]  ip_set_create+0x3cc/0x960
[  128.966229][ T6754]  nfnetlink_rcv_msg+0x4c6/0x590
[  128.966336][ T6754]  netlink_rcv_skb+0x120/0x220
[  128.966393][ T6754]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  128.966434][ T6754]  nfnetlink_rcv+0x16b/0x1690
[  128.966467][ T6754]  ? nlmon_xmit+0x4f/0x60
[  128.966495][ T6754]  ? consume_skb+0x49/0x150
[  128.966534][ T6754]  ? nlmon_xmit+0x4f/0x60
[  128.966556][ T6754]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  128.966615][ T6754]  ? __dev_queue_xmit+0x1200/0x2000
[  128.966667][ T6754]  ? __dev_queue_xmit+0x182/0x2000
[  128.966782][ T6754]  ? ref_tracker_free+0x37d/0x3e0
[  128.966863][ T6754]  ? __netlink_deliver_tap+0x4dc/0x500
[  128.966910][ T6754]  netlink_unicast+0x5c0/0x690
[  128.966945][ T6754]  netlink_sendmsg+0x58b/0x6b0
[  128.967028][ T6754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.967070][ T6754]  __sock_sendmsg+0x142/0x180
[  128.967168][ T6754]  ____sys_sendmsg+0x31e/0x4e0
[  128.967205][ T6754]  ___sys_sendmsg+0x17b/0x1d0
[  128.967268][ T6754]  __x64_sys_sendmsg+0xd4/0x160
[  128.967336][ T6754]  x64_sys_call+0x191e/0x2ff0
[  128.967363][ T6754]  do_syscall_64+0xd2/0x200
[  128.967389][ T6754]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  128.967486][ T6754]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  128.967507][ T6754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.967528][ T6754] RIP: 0033:0x7f1a4cf6eb69
[  128.967556][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.967579][ T6754] RSP: 002b:00007f1a4b5cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.967643][ T6754] RAX: ffffffffffffffda RBX: 00007f1a4d195fa0 RCX: 00007f1a4cf6eb69
[  128.967659][ T6754] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006
[  128.967675][ T6754] RBP: 00007f1a4cff1df1 R08: 0000000000000000 R09: 0000000000000000
[  128.967687][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.967698][ T6754] R13: 0000000000000000 R14: 00007f1a4d195fa0 R15: 00007ffe41916798
[  128.967718][ T6754]  </TASK>
[  128.967724][ T6754] memory: usage 307200kB, limit 307200kB, failcnt 1902
[  129.043597][ T6802] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1019'.
[  129.044913][ T6754] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0
[  129.059868][ T6802] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  129.060629][ T6754] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  129.343946][ T6754] Memory cgroup stats for /syz6:
[  129.344287][ T6754] cache 0
[  129.352237][ T6754] rss 0
[  129.355042][ T6754] shmem 0
[  129.358329][ T6754] mapped_file 0
[  129.361800][ T6754] dirty 0
[  129.364740][ T6754] writeback 0
[  129.368102][ T6754] workingset_refault_anon 86
[  129.372761][ T6754] workingset_refault_file 0
[  129.377257][ T6754] swap 389120
[  129.380822][ T6754] swapcached 0
[  129.384241][ T6754] pgpgin 95164
[  129.387680][ T6754] pgpgout 95164
[  129.391276][ T6754] pgfault 87071
[  129.394743][ T6754] pgmajfault 53
[  129.398246][ T6754] inactive_anon 0
[  129.401886][ T6754] active_anon 0
[  129.405342][ T6754] inactive_file 0
[  129.408997][ T6754] active_file 0
[  129.412470][ T6754] unevictable 0
[  129.415988][ T6754] hierarchical_memory_limit 314572800
[  129.421387][ T6754] hierarchical_memsw_limit 9223372036854771712
[  129.427564][ T6754] total_cache 0
[  129.431100][ T6754] total_rss 0
[  129.434398][ T6754] total_shmem 0
[  129.437948][ T6754] total_mapped_file 0
[  129.441938][ T6754] total_dirty 0
[  129.445466][ T6754] total_writeback 0
[  129.449370][ T6754] total_workingset_refault_anon 86
[  129.454500][ T6754] total_workingset_refault_file 0
[  129.459549][ T6754] total_swap 389120
[  129.463398][ T6754] total_swapcached 0
[  129.467322][ T6754] total_pgpgin 95164
[  129.471305][ T6754] total_pgpgout 95164
[  129.475302][ T6754] total_pgfault 87071
[  129.479376][ T6754] total_pgmajfault 53
[  129.483375][ T6754] total_inactive_anon 0
[  129.487606][ T6754] total_active_anon 0
[  129.491661][ T6754] total_inactive_file 0
[  129.495831][ T6754] total_active_file 0
[  129.499849][ T6754] total_unevictable 0
[  129.503951][ T6754] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1003,pid=6753,uid=0
[  129.518740][ T6754] Memory cgroup out of memory: Killed process 6753 (syz.6.1003) total-vm:95944kB, anon-rss:1072kB, file-rss:22608kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  129.577985][ T3694] ==================================================================
[  129.586134][ T3694] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[  129.595978][ T3694] 
[  129.598311][ T3694] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1:
[  129.606394][ T3694]  tick_do_update_jiffies64+0x113/0x1c0
[  129.611976][ T3694]  tick_nohz_handler+0x7f/0x2d0
[  129.616863][ T3694]  __hrtimer_run_queues+0x20c/0x5a0
[  129.622093][ T3694]  hrtimer_interrupt+0x21a/0x460
[  129.627054][ T3694]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  129.632979][ T3694]  sysvec_apic_timer_interrupt+0x6f/0x80
[  129.638655][ T3694]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  129.644663][ T3694]  finish_task_switch+0xb6/0x2b0
[  129.649629][ T3694]  __schedule+0x6b9/0xb30
[  129.653994][ T3694]  __cond_resched+0x4e/0x90
[  129.658525][ T3694]  __alloc_frozen_pages_noprof+0xf5/0x360
[  129.664346][ T3694]  alloc_pages_mpol+0xb3/0x250
[  129.669144][ T3694]  vma_alloc_folio_noprof+0x1aa/0x300
[  129.674630][ T3694]  do_wp_page+0x5db/0x24e0
[  129.679059][ T3694]  handle_mm_fault+0x77d/0x2c20
[  129.683924][ T3694]  do_user_addr_fault+0x3fe/0x1090
[  129.689059][ T3694]  exc_page_fault+0x62/0xa0
[  129.693571][ T3694]  asm_exc_page_fault+0x26/0x30
[  129.698434][ T3694]  rep_movs_alternative+0x4a/0x90
[  129.703481][ T3694]  _copy_to_iter+0x13e/0xe30
[  129.708082][ T3694]  __skb_datagram_iter+0x2f4/0x690
[  129.713217][ T3694]  skb_copy_datagram_iter+0x3d/0x110
[  129.718555][ T3694]  unix_stream_read_actor+0x43/0x70
[  129.723791][ T3694]  unix_stream_read_generic+0x6b1/0x1580
[  129.729479][ T3694]  unix_stream_recvmsg+0xc3/0xf0
[  129.734523][ T3694]  sock_recvmsg+0x136/0x170
[  129.739037][ T3694]  ____sys_recvmsg+0xf5/0x280
[  129.743737][ T3694]  ___sys_recvmsg+0x11f/0x370
[  129.748422][ T3694]  __x64_sys_recvmsg+0xd1/0x160
[  129.753280][ T3694]  x64_sys_call+0x2b42/0x2ff0
[  129.757968][ T3694]  do_syscall_64+0xd2/0x200
[  129.762484][ T3694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.768393][ T3694] 
[  129.770728][ T3694] read to 0xffffffff868099c0 of 8 bytes by task 3694 on cpu 0:
[  129.778271][ T3694]  mem_cgroup_flush_stats_ratelimited+0x29/0x70
[  129.784528][ T3694]  count_shadow_nodes+0x6a/0x230
[  129.789479][ T3694]  do_shrink_slab+0x60/0x680
[  129.794091][ T3694]  shrink_slab+0x448/0x760
[  129.798522][ T3694]  shrink_node+0x6c3/0x2120
[  129.803056][ T3694]  do_try_to_free_pages+0x3f6/0xcd0
[  129.808264][ T3694]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[  129.814170][ T3694]  try_charge_memcg+0x358/0x9e0
[  129.819055][ T3694]  charge_memcg+0x51/0xc0
[  129.823390][ T3694]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  129.829376][ T3694]  __read_swap_cache_async+0x1df/0x350
[  129.834855][ T3694]  swap_cluster_readahead+0x277/0x3e0
[  129.840251][ T3694]  swapin_readahead+0xde/0x6f0
[  129.845043][ T3694]  do_swap_page+0x301/0x2430
[  129.849644][ T3694]  handle_mm_fault+0x9a5/0x2c20
[  129.854503][ T3694]  do_user_addr_fault+0x636/0x1090
[  129.859638][ T3694]  exc_page_fault+0x62/0xa0
[  129.864148][ T3694]  asm_exc_page_fault+0x26/0x30
[  129.869006][ T3694] 
[  129.871331][ T3694] value changed: 0x00000000ffffbd2f -> 0x00000000ffffbd30
[  129.878436][ T3694] 
[  129.880783][ T3694] Reported by Kernel Concurrency Sanitizer on:
[  129.886941][ T3694] CPU: 0 UID: 0 PID: 3694 Comm: syz-executor Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) 
[  129.899188][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  129.909251][ T3694] ==================================================================