last executing test programs:

8m57.482136028s ago: executing program 0 (id=191):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

8m57.44473674s ago: executing program 0 (id=193):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000007840)=@newchain={0x24, 0x64, 0x6d0a5f4622c10047, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xffe0}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0)
io_uring_enter(r2, 0x27e2, 0x0, 0x7, 0x0, 0x0)

8m57.389509063s ago: executing program 0 (id=196):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)

8m57.271541448s ago: executing program 0 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x3)

8m57.23101922s ago: executing program 0 (id=201):
r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

8m56.737168634s ago: executing program 0 (id=207):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

8m56.737032054s ago: executing program 32 (id=207):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

8m39.87452336s ago: executing program 4 (id=512):
r0 = gettid()
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
clock_nanosleep(0x9, 0xca9a3b, &(0x7f0000000000)={0x0, 0x989680}, 0x0)

8m39.822907752s ago: executing program 4 (id=515):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1)

8m39.802929603s ago: executing program 4 (id=516):
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r1, 0x0)
r2 = epoll_create1(0x80000)
epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000240)={[0xd]}, 0x8)

8m39.760484536s ago: executing program 4 (id=519):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8)

8m39.701292548s ago: executing program 4 (id=520):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa14, &(0x7f0000001840)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x7fff, 0x1a, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12)

8m39.033221502s ago: executing program 4 (id=542):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffd, 0x2002)
r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x7fffffffffffffff, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

8m39.033107262s ago: executing program 33 (id=542):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffd, 0x2002)
r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x7fffffffffffffff, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

7m54.125285286s ago: executing program 5 (id=1308):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000480)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0xe53729bd61505fe4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
shutdown(r1, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

7m54.012923732s ago: executing program 5 (id=1311):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)

7m53.908894667s ago: executing program 5 (id=1314):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendto(r0, &(0x7f0000000240)="4e9d0ec38867", 0x6, 0x800, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}], 0x2, 0x4000000)

7m53.785933183s ago: executing program 5 (id=1317):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==")
open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
getpid()
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7)

7m53.650007339s ago: executing program 5 (id=1320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x80f05c34c9b32e55, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)

7m53.074551788s ago: executing program 5 (id=1332):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m53.074355298s ago: executing program 34 (id=1332):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m46.282049704s ago: executing program 7 (id=1467):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10)

7m46.254558586s ago: executing program 7 (id=1458):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

7m46.17120911s ago: executing program 7 (id=1461):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)

7m45.816682637s ago: executing program 7 (id=1465):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40000, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x3)

7m45.753484461s ago: executing program 7 (id=1469):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc0049364, 0x0)

7m45.453280665s ago: executing program 7 (id=1471):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1)

7m45.451686026s ago: executing program 35 (id=1471):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1)

2m24.691117194s ago: executing program 6 (id=5515):
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2m23.993092098s ago: executing program 6 (id=5519):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140))
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

2m23.129612961s ago: executing program 6 (id=5528):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket(0x40000000015, 0x5, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012102, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0xaae, &(0x7f0000000180)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$nl_generic(0x10, 0x3, 0x10)

2m22.458366824s ago: executing program 6 (id=5531):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000040)={[{@nouid32}, {@errors_remount}, {@lazytime}, {@noquota}]}, 0x1, 0x51b, &(0x7f00000001c0)="$eJzs3c9vI1cdAPDveNeON5s2adkDIGiXtrCg1TqJt42qHqCcEEKVED2CtA2JN4pix1HslCbsIT0jcUKiEic48gdw7gmJIxcENy7lgMSPCNQgcTCa8Th1svZuQn44jT8faXbemzee73ubnfcyz2u/AMbW7YjYjYhSRLwTEdP58STf4s3ulp738d6jpf29R0tJdDpv/yPJytNj0fea1M38muWI+N63In6YPB63tb2ztliv1zbz/Gy7sTHb2t65t9pYXKmt1Nar1YX5hbnX779W7b3k1mnb+mKjlKe++NHvd7/247RaU/mR/nacpW7TiwdxUtcj4jvnEWwEruXtKY26IvxfChHxfES8lN3/03Et+2kCAFdZpzMdnen+/IHkcBYAuCoK2RxYUqjkcwFTUShUKt05vFsxWag3W+27D5tb68vdubKZKBYertZrc/lc4UwUkzQ/n6U/yVeP5O9HxHMR8bOJG1m+stSsL4/yFx8AGGM3j4z//57ojv8AwBVXHnUFAIALZ/wHgPFj/AeA8WP8B4Dx0x3/b4y6GgDABfL8DwDjx/gPAGPlu2+9lW6d/fz7r5ff3d5aa757b7nWWqs0tpYqS83NjcpKs7mSfWdP42nXqzebG/OvxtZ7M1/faLVnW9s7DxrNrfX2g+x7vR/UitlZuxfQMgBgmOde/PBPSToiv3Ej26JvLYfiSGsGnLfCqCsAjMy1UVcAGBmrfcH4OsUzfjHip6YI4FPtd9mfA5boPaQ86ANCnU6nc17VAs7dnc+Z/4dx1Tf/738Bw5gx/w/jy/w/jK9OJznuIv9x3BMBgMvNHD8w5P3/5/P9r/M3B36wfPSMD86zVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHC59db/reRrgU9FoVCpRDwTETNRTB6u1mtzEfFsRPxxojiR5udHXGcA4LQKf03y9b/uTL8ydajohZsHyVJE/OgXb//8vcV2e/MPEaXknxO94+0P8uPVEwUunVULAIAn643T2b7vQf7jvUdLve0i6/O3b0ZEuRt/f68U+wfxr8f1bF+OYkRM/ivJ811J39zFaey+HxGfHdT+JKayOZDuyqdH46exn7nQ+IVD8QtZWXef/l185gzqAuPmw7T/eXPQ/VeI29l+8P1fznqo08v7v/RSS/tZH/hJ/F7/d21I/3f7uDFe/e23u6kbj5e9H/H56xG92Pt9/U8vfjIk/ivHjP/nL7zw0rCyzi8j7sTg+P2xZtuNjdnW9s691cbiSm2ltl6tLswvzL1+/7XqbDZHPTt8NPj7G3efHVaWtn9ySPzyU9r/5WO2/1f/fef7X3pC/K++PCh+IW49IX46Jn7lmPEXJ39THlaWxl8e0v6n/fzvHjP+R3/ZeWzZcABgdFrbO2uL9XptU0Li8ifSf7KXoBoDE9842at6zzcnj1WKwUU/ebl7xb6iTmdtsfe7/wmbM6zHOItZN+AyOLjpI+I/o64MAAAAAAAAAAAAAAAw0EV8OmrUbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODq+l8AAAD//5WlxZA=")
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, 0x0, 0x840)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r2, 0x0, 0x0, 0x8800000)
getsockname(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x1d)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0xfffffdb3)

2m22.192271887s ago: executing program 6 (id=5539):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$RTC_PIE_ON(r3, 0x7005)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xcab)

2m21.661192594s ago: executing program 6 (id=5550):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
ioctl$TCSETS(r2, 0x40045431, 0x0)
syz_open_pts(r2, 0x8000)
acct(&(0x7f0000000040)='./file0\x00')

2m21.660931003s ago: executing program 36 (id=5550):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
ioctl$TCSETS(r2, 0x40045431, 0x0)
syz_open_pts(r2, 0x8000)
acct(&(0x7f0000000040)='./file0\x00')

9.848805583s ago: executing program 3 (id=6480):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x401)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)

8.089340179s ago: executing program 3 (id=6488):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB='f\n\x00\x00\t\x00\x00\x00a'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xde5d, 0xffffffffffffffff, 0x8, 0x5}, 0x1}}, @TCA_IFE_TYPE={0xfed1, 0x5, 0xfff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014)
writev(r0, &(0x7f00000003c0), 0x100000000000022d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0a00ff0000000071104300000000009500000000000000c3d8bac20aa85cccdb1f52621a9c227f70ec7a4b0b9079ec2d33e875ffd305d6"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

7.044511041s ago: executing program 9 (id=6493):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r1, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7\v', 0x2}], 0x1}}], 0x1, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000014840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a31000000002c000000030a010200000000000000000100ffff0900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000040c000240000000000000"], 0x65d4}}, 0x200000d4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
lseek(r0, 0x9, 0x0)

6.950870286s ago: executing program 3 (id=6494):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1}, 0xfffffff0}], 0x1, 0x0, 0x0)
recvfrom(r4, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002040)={'batadv0\x00', <r5=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200, '\x00', r5, 0xffffffffffffffff, 0x2, 0x5}, 0x50)

6.758012865s ago: executing program 3 (id=6496):
r0 = socket$unix(0x1, 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x5)
bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
mq_open(&(0x7f0000001900)=':){{:,\x00', 0x18c0, 0x84, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x103001, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

6.039846061s ago: executing program 3 (id=6505):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x158200, 0x46, 0x20}, 0x18)
openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x413443, 0x30, 0x12}, 0x16)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x85)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

5.678072269s ago: executing program 2 (id=6506):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
syz_open_dev$usbfs(&(0x7f0000000100), 0x6f, 0x100)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5.110765677s ago: executing program 3 (id=6507):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r3, &(0x7f0000000040), &(0x7f000009de80), 0x0)

4.060582059s ago: executing program 9 (id=6509):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x100000000000000)
splice(r3, 0x0, r6, 0x0, 0x100035ab, 0x4)
listen(r0, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r7, &(0x7f0000000080)=@file={0x1}, 0x6e)
accept4(r0, 0x0, 0x0, 0x80000)

3.953911615s ago: executing program 1 (id=6510):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x401)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)

3.953202324s ago: executing program 2 (id=6511):
r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r0, 0x200047bc, 0x1000000, 0x0, 0x0, 0x5e)

3.790946632s ago: executing program 1 (id=6512):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000000))

3.790699713s ago: executing program 2 (id=6513):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10)
preadv(r1, 0x0, 0x0, 0x10000, 0x401)
r2 = socket$inet6(0xa, 0x3, 0x3)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x40083}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
sendmmsg$inet(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000ec0)="708307d3e357bf9dc2e9505d343cbfe3da86f1ef7bafc59397b8a256743bcb66a911b327dae33e30c629845aa6ca8e0c566e362db1a35852d6daf8c9fd497bcb2599da1fb761580fb48b4e997084b97d4173696599c85e8c757dcaedf264aa4f8f7c15b7861beda965604fa2c9940ccc31bc2e274e7396b9caa06c77d84fce56ad7683c12d794d70b97b75a7676ec1e228972cdfc0fb2969656b91014f95abbd073e51c8ec6ae5c38c825b60841661bad06d95674cc2389dbdedad88", 0xbc}, {0x0}, {&(0x7f0000001080)="49215bccebc8a00e8eced196d69df4791b546721e808879b7b525a1bbdddd89ad46912c2320098f4a018e7808fc3d31b9d71316e1744e1ab2e91886f033de701d11102b1d732f46ebe70f5be696fe4c601c2383334cdc7010af4ca897858ed77ba4b8f4f1345105887d381deee77b8a511f3a802dcc0620ace54561573813ced951b3b96be6dd24fad6e40c0195e526f17d956bc360fd244c69179d4b910217ccaf400f8c0324a152a0471213498a82fd613f556514f49b4e4d8f7e9a2a30e4eb52622449661db", 0xc7}, {&(0x7f0000001180)}, {&(0x7f0000001240)="a05b9741c1fa370ebe48f69f51f8793e40e515bb03f8b61b401da04bf123797251ba7527fc3a4b307327732b5bc6a1554ae177a367b56dd8cf799ddd2ec3c6ea8b7120dd870e8e70a4db1fe6ad1ac120aceeaf7a54bfcf5a25de9372fdd6cd7f732b3e434e3d71b1d64b5fb15c74f65c0c61733b8fb3f8d5672a659c7f110f5fe042cae80c206f3c2f959bcebfc29ac7ef0e7dfb4dbad201cecc5fd1f515cb1673b797c488f87c9d6ff62b268cb00d77df2da0ee05b4e10e0f4f3540c63a7498f57d2af2", 0xc4}, {&(0x7f0000001340)}, {&(0x7f0000001500)}], 0x7}}, {{&(0x7f0000002680)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x3, 0x8004)

3.790264183s ago: executing program 8 (id=6514):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x40, <r1=>r0, 'id0\x00'})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8)
getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f00000000c0)='%d\xf1%\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0)
openat$cgroup(r1, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
r6 = socket(0xa, 0x3, 0x87)
sendmmsg$unix(r6, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x40000a0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14)

3.728435446s ago: executing program 9 (id=6515):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB='f\n\x00\x00\t\x00\x00\x00a'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000080000000000007000000", @ANYRES32=r7, @ANYBLOB="0c00028005be"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014)
writev(r0, &(0x7f00000003c0), 0x100000000000022d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0a00ff0000000071104300000000009500000000000000c3d8bac20aa85cccdb1f52621a9c227f70ec7a4b0b9079ec2d33e875ffd305d6"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

3.62891469s ago: executing program 8 (id=6516):
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_sock_diag(0x10, 0x3, 0x4)
pipe(&(0x7f0000000080))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

3.4446798s ago: executing program 8 (id=6517):
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, 0x0)
unshare(0x60000600)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
unshare(0x22020600)
r0 = socket(0x18, 0x800, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4ea1, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
get_mempolicy(0x0, &(0x7f0000001640), 0x3ff, &(0x7f0000400000/0xc00000)=nil, 0x1)
socket$inet6(0xa, 0x2, 0x0)
msync(&(0x7f0000f0b000/0x3000)=nil, 0x3000, 0x0)

2.775460553s ago: executing program 9 (id=6518):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407ffe, 0xaea}, 0x114b27, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r3, 0x29, 0x48, &(0x7f0000000100)=r4, 0x120)
sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)

2.585138362s ago: executing program 2 (id=6519):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0)
readv(r1, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x2001, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)

2.089590737s ago: executing program 8 (id=6520):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000140)={0xfff7, 0xb79, 0xacb, 0xd6b0, 0xe, "c8cd1612469d83a4"})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x3c, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x8000)

1.693830066s ago: executing program 8 (id=6521):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000740)={0x0, 0x0, {0x3, 0x1, 0x6}, 0x76e0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000480))
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@random="fb289a1dd751", @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00')
lseek(r3, 0x339, 0x4)
futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1)

1.693108216s ago: executing program 1 (id=6522):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x401)
r1 = socket$inet6(0xa, 0x3, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x40083}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000ec0)="708307d3e357bf9dc2e9505d343cbfe3da86f1ef7bafc59397b8a256743bcb66a911b327dae33e30c629845aa6ca8e0c566e362db1a35852d6daf8c9fd497bcb2599da1fb761580fb48b4e997084b97d4173696599c85e8c757dcaedf264aa4f8f7c15b7861beda965604fa2c9940ccc31bc2e274e7396b9caa06c77d84fce56ad7683c12d794d70b97b75a7676ec1e228972cdfc0fb2969656b91014f95abbd073e51c8ec6ae5c38c825b60841661bad06d95674cc2389dbdedad88", 0xbc}, {0x0}, {&(0x7f0000001080)="49215bccebc8a00e8eced196d69df4791b546721e808879b7b525a1bbdddd89ad46912c2320098f4a018e7808fc3d31b9d71316e1744e1ab2e91886f033de701d11102b1d732f46ebe70f5be696fe4c601c2383334cdc7010af4ca897858ed77ba4b8f4f1345105887d381deee77b8a511f3a802dcc0620ace54561573813ced951b3b96be6dd24fad6e40c0195e526f17d956bc360fd244c69179d4b910217ccaf400f8c0324a152a0471213498a82fd613f556514f49b4e4d8f7e9a2a30e4eb52622449661db", 0xc7}, {&(0x7f0000001180)}, {&(0x7f0000001240)="a05b9741c1fa370ebe48f69f51f8793e40e515bb03f8b61b401da04bf123797251ba7527fc3a4b307327732b5bc6a1554ae177a367b56dd8cf799ddd2ec3c6ea8b7120dd870e8e70a4db1fe6ad1ac120aceeaf7a54bfcf5a25de9372fdd6cd7f732b3e434e3d71b1d64b5fb15c74f65c0c61733b8fb3f8d5672a659c7f110f5fe042cae80c206f3c2f959bcebfc29ac7ef0e7dfb4dbad201cecc5fd1f515cb1673b797c488f87c9d6ff62b268cb00d77df2da0ee05b4e10e0f4f3540c63a7498f57d2af2", 0xc4}, {&(0x7f0000001340)}, {&(0x7f0000001500)}], 0x7}}, {{&(0x7f0000002680)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x3, 0x8004)

1.692622186s ago: executing program 2 (id=6523):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20)
ftruncate(r0, 0x2007ffc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000))
sendfile(r0, r0, 0x0, 0x800000009)

1.691960456s ago: executing program 9 (id=6524):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x4, 0x3ff, 0x10001}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xf6f}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x98}}, 0x800)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

1.570405842s ago: executing program 1 (id=6525):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

1.509038206s ago: executing program 1 (id=6526):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x89}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_read_part_table(0x105c, &(0x7f0000001240)="$eJzsz7FtwzAUBNATpUhQlyYjZIlMkSZ1CndeQm68jDfxPgZc0qDAGWwX71WfPB6BH15qmHP8H8cka5JT6pLULcnnHk91aI9a9NEb97kPa/lOm7f9NPcvrofktt+MJclPktr00m/OX2WdkiVJ+bs8fWEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEOPAAAA///UnBCa")
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x102, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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")
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r4, &(0x7f0000000440), 0x0, 0x1, 0x0)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

637.340559ms ago: executing program 9 (id=6527):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0)

246.131028ms ago: executing program 8 (id=6528):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
unshare(0x24020400)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x80)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

21.17231ms ago: executing program 1 (id=6529):
fstatfs(0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getpid()
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x11, &(0x7f0000000100), 0x1, 0x616, &(0x7f0000000b40)="$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")
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mremap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00004d3000/0x1000)=nil)

0s ago: executing program 2 (id=6530):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3800010, &(0x7f00000003c0)={[{@errors_remount}, {@nodioread_nolock}], [{@subj_type={'subj_type', 0x3d, 'euid'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, '/}'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}, 0x1, 0x524, &(0x7f0000001640)="$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")
stat(&(0x7f0000005e80)='./file0\x00', 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nouser_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"ae36c6e51542a17e2e98db1d43c4be6c", 0x0, 0x0, {0x8, 0xb6}, {0x92, 0x10001}, 0x3, [0x5, 0x1, 0xfffffffffffffff8, 0x0, 0x2, 0x3, 0x401, 0xffff, 0x0, 0xfffffffffffffff9, 0x3, 0x81, 0xfffffffffffffff8, 0x2, 0x1, 0x5]})
prlimit64(0x0, 0xb, 0x0, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x18, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}}}}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000a00)="c7", 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x20044800)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
stat(&(0x7f0000005f40)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

rch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  424.352271][T22282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22282 comm=syz.8.5439
[  424.441683][   T28] audit: type=1326 audit(1774269567.346:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22253 comm="syz.1.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  424.504462][   T83] bridge_slave_1: left allmulticast mode
[  424.517603][   T83] bridge_slave_1: left promiscuous mode
[  424.529217][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.538531][   T28] audit: type=1326 audit(1774269567.346:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22253 comm="syz.1.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f267e59e007 code=0x7ffc0000
[  424.575351][   T83] bridge_slave_0: left allmulticast mode
[  424.585358][   T83] bridge_slave_0: left promiscuous mode
[  424.610143][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.718074][T22304] sctp: [Deprecated]: syz.1.5445 (pid 22304) Use of struct sctp_assoc_value in delayed_ack socket option.
[  424.718074][T22304] Use struct sctp_sack_info instead
[  424.753674][T22307] netlink: 'syz.2.5444': attribute type 1 has an invalid length.
[  424.974361][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.004419][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.014069][   T83] bond0 (unregistering): Released all slaves
[  425.031674][T22307] 8021q: adding VLAN 0 to HW filter on device bond3
[  425.055637][T22314] ip6erspan0: entered promiscuous mode
[  425.067372][T22314] bond3: (slave ip6erspan0): making interface the new active one
[  425.076587][T22314] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  425.099391][T22315] macvlan0: entered promiscuous mode
[  425.105151][T22315] bond3: entered promiscuous mode
[  425.110824][T22315] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  425.119552][T22315] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  425.136135][T22315] bond3: left promiscuous mode
[  425.219085][   T83] hsr_slave_0: left promiscuous mode
[  425.231381][   T83] hsr_slave_1: left promiscuous mode
[  425.237146][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.253344][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.879410][T22342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5451'.
[  425.966237][T22343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5451'.
[  426.252289][   T83] team0 (unregistering): Port device team_slave_1 removed
[  426.302936][   T83] team0 (unregistering): Port device team_slave_0 removed
[  426.389595][T22343] veth27: entered promiscuous mode
[  426.428628][T22343] veth27: entered allmulticast mode
[  426.451532][T22322] lo speed is unknown, defaulting to 1000
[  426.821738][   T83] IPVS: stop unused estimator thread 0...
[  428.787300][T22455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5473'.
[  428.846543][T22455] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22455 comm=syz.2.5473
[  428.897542][T22459] lo speed is unknown, defaulting to 1000
[  428.913946][T22461] sctp: [Deprecated]: syz.8.5485 (pid 22461) Use of struct sctp_assoc_value in delayed_ack socket option.
[  428.913946][T22461] Use struct sctp_sack_info instead
[  430.432197][T22469] syz.3.5478 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[  430.460502][T22500] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5486'.
[  430.469932][   T28] kauditd_printk_skb: 61 callbacks suppressed
[  430.469946][   T28] audit: type=1400 audit(1774269574.906:3434): avc:  denied  { create } for  pid=22499 comm="syz.6.5486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  430.500388][T22500] hsr_slave_0: left promiscuous mode
[  430.514867][T22500] hsr_slave_1: left promiscuous mode
[  430.551789][T22469] CPU: 1 UID: 0 PID: 22469 Comm: syz.3.5478 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  430.551896][T22469] Tainted: [W]=WARN
[  430.551901][T22469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  430.551912][T22469] Call Trace:
[  430.551918][T22469]  <TASK>
[  430.551925][T22469]  __dump_stack+0x1d/0x30
[  430.552013][T22469]  dump_stack_lvl+0x95/0xd0
[  430.552031][T22469]  dump_stack+0x15/0x1b
[  430.552050][T22469]  dump_header+0x80/0x240
[  430.552072][T22469]  oom_kill_process+0x295/0x350
[  430.552106][T22469]  out_of_memory+0x97d/0xb80
[  430.552127][T22469]  try_charge_memcg+0x62e/0xa10
[  430.552159][T22469]  obj_cgroup_charge_pages+0x23/0xc0
[  430.552189][T22469]  __memcg_kmem_charge_page+0x9e/0x170
[  430.552213][T22469]  __alloc_frozen_pages_noprof+0x18a/0x360
[  430.552241][T22469]  alloc_pages_mpol+0xb3/0x260
[  430.552268][T22469]  alloc_pages_noprof+0x8f/0x130
[  430.552356][T22469]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  430.552387][T22469]  __kvmalloc_node_noprof+0x3d4/0x650
[  430.552428][T22469]  ? ip_set_alloc+0x24/0x30
[  430.552449][T22469]  ? ip_set_alloc+0x24/0x30
[  430.552542][T22469]  ? __kmalloc_cache_noprof+0x18a/0x410
[  430.552563][T22469]  ip_set_alloc+0x24/0x30
[  430.552587][T22469]  hash_netiface_create+0x282/0x740
[  430.552611][T22469]  ? __pfx_hash_netiface_create+0x10/0x10
[  430.552651][T22469]  ip_set_create+0x3cf/0x970
[  430.552765][T22469]  ? __nla_parse+0x40/0x60
[  430.552854][T22469]  nfnetlink_rcv_msg+0x509/0x5d0
[  430.552894][T22469]  netlink_rcv_skb+0x123/0x220
[  430.552920][T22469]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  430.553097][T22469]  nfnetlink_rcv+0x167/0x1720
[  430.553119][T22469]  ? __account_obj_stock+0x211/0x350
[  430.553167][T22469]  ? get_page_from_freelist+0x807/0x1aa0
[  430.553193][T22469]  ? __rcu_read_unlock+0x4e/0x70
[  430.553213][T22469]  ? avc_has_perm_noaudit+0xab/0x130
[  430.553239][T22469]  ? __rcu_read_unlock+0x4e/0x70
[  430.553255][T22469]  ? avc_has_perm_noaudit+0xab/0x130
[  430.553391][T22469]  ? _raw_spin_lock_bh+0x56/0xb0
[  430.553416][T22469]  ? _raw_spin_unlock_bh+0x18/0x20
[  430.553440][T22469]  ? selinux_nlmsg_lookup+0x99/0x890
[  430.553470][T22469]  ? __rcu_read_unlock+0x33/0x70
[  430.553555][T22469]  ? __netlink_lookup+0x276/0x2b0
[  430.553571][T22469]  netlink_unicast+0x5c0/0x690
[  430.553597][T22469]  netlink_sendmsg+0x5c8/0x6f0
[  430.553675][T22469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  430.553702][T22469]  ____sys_sendmsg+0x563/0x5b0
[  430.553776][T22469]  ___sys_sendmsg+0x195/0x1e0
[  430.553816][T22469]  __x64_sys_sendmsg+0xd4/0x160
[  430.553891][T22469]  x64_sys_call+0x194c/0x3020
[  430.553915][T22469]  do_syscall_64+0x12c/0x370
[  430.554011][T22469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.554032][T22469] RIP: 0033:0x7fd70befc799
[  430.554048][T22469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.554062][T22469] RSP: 002b:00007fd70a957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  430.554078][T22469] RAX: ffffffffffffffda RBX: 00007fd70c175fa0 RCX: 00007fd70befc799
[  430.554090][T22469] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000005
[  430.554104][T22469] RBP: 00007fd70bf92c99 R08: 0000000000000000 R09: 0000000000000000
[  430.554114][T22469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.554126][T22469] R13: 00007fd70c176038 R14: 00007fd70c175fa0 R15: 00007ffee4dec788
[  430.554194][T22469]  </TASK>
[  430.920231][T22469] memory: usage 307200kB, limit 307200kB, failcnt 1198
[  430.927537][T22469] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  430.941920][T22469] kmem: usage 211072kB, limit 9007199254740988kB, failcnt 0
[  430.952340][T22469] Memory cgroup stats for /syz3:
[  430.952794][T22469] cache 93097984
[  430.962123][T22469] rss 5328896
[  430.965714][T22469] shmem 93097984
[  430.969413][T22469] mapped_file 0
[  430.973057][T22469] dirty 0
[  430.978336][T22469] writeback 0
[  430.981817][T22469] workingset_refault_anon 5192
[  430.983106][T22504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  430.993799][T22504] IPv6: NLM_F_CREATE should be set when creating new route
[  431.018947][T22469] workingset_refault_file 1795
[  431.023731][T22469] swap 0
[  431.026747][T22469] swapcached 8220672
[  431.030747][T22469] pgpgin 432338
[  431.048123][T22469] pgpgout 408306
[  431.051804][T22469] pgfault 451769
[  431.055645][T22469] pgmajfault 780
[  431.059310][T22469] inactive_anon 4096
[  431.063481][T22469] active_anon 94040064
[  431.069657][T22469] inactive_file 4382720
[  431.073859][T22469] active_file 8192
[  431.080829][T22469] unevictable 0
[  431.084326][T22469] hierarchical_memory_limit 314572800
[  431.089960][T22469] hierarchical_memsw_limit 9223372036854771712
[  431.098177][T22469] total_cache 93097984
[  431.102414][T22469] total_rss 5328896
[  431.106965][T22469] total_shmem 93097984
[  431.111136][T22469] total_mapped_file 0
[  431.115200][T22469] total_dirty 0
[  431.119149][T22469] total_writeback 0
[  431.123057][T22469] total_workingset_refault_anon 5192
[  431.130706][T22469] total_workingset_refault_file 1795
[  431.155150][T22469] total_swap 0
[  431.230999][T22469] total_swapcached 8220672
[  431.241153][T22469] total_pgpgin 432338
[  431.263386][T22469] total_pgpgout 408306
[  431.267828][T22469] total_pgfault 451769
[  431.271887][T22469] total_pgmajfault 780
[  431.282918][T22469] total_inactive_anon 4096
[  431.294078][T22469] total_active_anon 94040064
[  431.333177][T22469] total_inactive_file 4382720
[  431.340138][T22469] total_active_file 8192
[  431.344393][T22469] total_unevictable 0
[  431.395961][T22469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5478,pid=22467,uid=0
[  431.486097][T22469] Memory cgroup out of memory: Killed process 22467 (syz.3.5478) total-vm:96344kB, anon-rss:5700kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0
[  432.517813][T22644] loop6: detected capacity change from 0 to 1024
[  432.527371][T22644] EXT4-fs: inline encryption not supported
[  432.533240][T22644] EXT4-fs: Ignoring removed nomblk_io_submit option
[  432.541113][T22644] EXT4-fs: Ignoring removed nobh option
[  432.547671][T22644] EXT4-fs: Ignoring removed bh option
[  432.586431][T22644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.605122][T22644] ipip0: entered promiscuous mode
[  432.630351][ T5284] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.897442][T22654] loop6: detected capacity change from 0 to 1024
[  432.934340][T22654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.263762][T22662] syz.1.5511 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  433.938550][ T5284] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.013757][   T28] audit: type=1326 audit(1774269578.456:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70befc799 code=0x7ffc0000
[  434.111213][   T28] audit: type=1326 audit(1774269578.456:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70befc799 code=0x7ffc0000
[  434.221993][   T28] audit: type=1326 audit(1774269578.456:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70befc799 code=0x7ffc0000
[  434.267791][   T28] audit: type=1326 audit(1774269578.456:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd70befc799 code=0x7ffc0000
[  434.308475][   T28] audit: type=1326 audit(1774269578.516:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70befc799 code=0x7ffc0000
[  434.358458][   T28] audit: type=1326 audit(1774269578.516:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd70befc502 code=0x7ffc0000
[  434.397780][   T28] audit: type=1326 audit(1774269578.516:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd70befc597 code=0x7ffc0000
[  434.455241][   T28] audit: type=1326 audit(1774269578.516:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd70beb9491 code=0x7ffc0000
[  434.487042][   T28] audit: type=1326 audit(1774269578.516:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22680 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd70befd589 code=0x7ffc0000
[  434.671937][T22693] macvlan0: left allmulticast mode
[  434.681351][T22693] bond7: left promiscuous mode
[  434.687286][T22693] bridge0: left promiscuous mode
[  434.692455][T22693] bridge0: left allmulticast mode
[  434.698985][T22693] gretap2: left allmulticast mode
[  434.746879][T22693] veth27: left promiscuous mode
[  434.751811][T22693] veth27: left allmulticast mode
[  434.760048][T22691] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  436.183798][T22729] loop6: detected capacity change from 0 to 512
[  436.251140][T22729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.264574][T22729] ext4 filesystem being mounted at /960/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  436.306453][T22729] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5531: bg 0: block 217: padding at end of block bitmap is not set
[  436.370601][T22729] EXT4-fs (loop6): Remounting filesystem read-only
[  436.446995][T22750] netlink: 'syz.1.5538': attribute type 14 has an invalid length.
[  436.479227][T22752] netlink: 'syz.2.5540': attribute type 1 has an invalid length.
[  436.528509][T22752] 8021q: adding VLAN 0 to HW filter on device bond5
[  436.548781][T22752] bond4: (slave bond5): making interface the new active one
[  436.557033][T22752] bond4: (slave bond5): Enslaving as an active interface with an up link
[  436.575979][T22752] bond4: (slave gretap2): Enslaving as a backup interface with an up link
[  436.588996][T22752] bond4: entered promiscuous mode
[  436.594115][T22752] bond5: entered promiscuous mode
[  436.600201][T22752] bond4: entered allmulticast mode
[  436.605636][T22752] bond5: entered allmulticast mode
[  436.610978][T22752] 8021q: adding VLAN 0 to HW filter on device bond4
[  436.664431][   T28] kauditd_printk_skb: 59 callbacks suppressed
[  436.664445][   T28] audit: type=1400 audit(1774269581.106:3503): avc:  denied  { connect } for  pid=22771 comm="syz.8.5546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  436.884247][ T8619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.161225][T22803] netlink: 'syz.8.5553': attribute type 1 has an invalid length.
[  437.173670][T22792] lo speed is unknown, defaulting to 1000
[  437.198988][T22803] bond13: entered promiscuous mode
[  437.212181][T22803] 8021q: adding VLAN 0 to HW filter on device bond13
[  437.243383][T22803] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5553'.
[  437.261174][T22803] bond13: entered allmulticast mode
[  437.276110][T22792] chnl_net:caif_netlink_parms(): no params data found
[  437.304239][T22803] bond13: (slave bridge13): making interface the new active one
[  437.313188][T22803] bridge13: entered promiscuous mode
[  437.319008][T22803] bridge13: entered allmulticast mode
[  437.328428][T22803] bond13: (slave bridge13): Enslaving as an active interface with an up link
[  437.374707][T22792] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.381937][T22792] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.390625][T22792] bridge_slave_0: entered allmulticast mode
[  437.398360][T22792] bridge_slave_0: entered promiscuous mode
[  437.406118][T22792] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.413345][T22792] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.422705][T22792] bridge_slave_1: entered allmulticast mode
[  437.430054][T22792] bridge_slave_1: entered promiscuous mode
[  437.451741][T22792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.463133][T22792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.486033][T22792] team0: Port device team_slave_0 added
[  437.492939][T22792] team0: Port device team_slave_1 added
[  437.511050][T22792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.518728][T22792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.555554][T22792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.578945][T22792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.586154][T22792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.629943][T22792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.658032][T22792] hsr_slave_0: entered promiscuous mode
[  437.664100][T22792] hsr_slave_1: entered promiscuous mode
[  437.724932][T22792] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  437.734845][T22792] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  437.743316][T22792] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  437.751722][T22792] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  437.790413][T22792] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.803749][T22792] 8021q: adding VLAN 0 to HW filter on device team0
[  437.813306][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.820517][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.833318][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.840602][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.901730][T22792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.000289][T22792] veth0_vlan: entered promiscuous mode
[  438.010799][T22792] veth1_vlan: entered promiscuous mode
[  438.029874][T22792] veth0_macvtap: entered promiscuous mode
[  438.040159][T22792] veth1_macvtap: entered promiscuous mode
[  438.052728][T22792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.064984][T22792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.077690][   T70] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.086975][   T70] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.099066][   T70] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.108611][   T70] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.128214][   T28] audit: type=1400 audit(1774269582.576:3504): avc:  denied  { mount } for  pid=22792 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  438.408741][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'.
[  438.825116][T22893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5558'.
[  439.424778][T22908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5561'.
[  439.510252][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'.
[  439.556738][ T3670] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.564990][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'.
[  439.575831][ T3670] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.575924][T22913] loop9: detected capacity change from 0 to 8192
[  439.584036][ T3670] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.616630][T22921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'.
[  439.621063][ T3670] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.636739][T21239]  loop9: p1 < > p2 p4 < p5 >
[  439.641427][T21239] loop9: partition table partially beyond EOD, truncated
[  439.650779][T21239] loop9: p1 start 134217728 is beyond EOD, truncated
[  439.658158][T22921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'.
[  439.673286][T21239] loop9: p2 size 591360 extends beyond EOD, truncated
[  439.701299][T21239] loop9: p5 size 591360 extends beyond EOD, truncated
[  439.719325][T22929] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5579'.
[  439.741794][T22913]  loop9: p1 < > p2 p4 < p5 >
[  439.746984][T22913] loop9: partition table partially beyond EOD, truncated
[  439.755706][T22913] loop9: p1 start 134217728 is beyond EOD, truncated
[  439.771271][T22913] loop9: p2 size 591360 extends beyond EOD, truncated
[  439.789615][T22913] loop9: p5 size 591360 extends beyond EOD, truncated
[  439.881966][T22929] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22929 comm=syz.8.5579
[  439.976798][T22944] 9pnet: p9_errstr2errno: server reported unknown error ile1
[  440.146304][T21462] udevd[21462]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  440.162109][T21239] udevd[21239]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  440.182878][T21169] udevd[21169]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory
[  440.367532][T21462] udevd[21462]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  440.382701][T21169] udevd[21169]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory
[  440.408227][T21239] udevd[21239]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  441.749151][T22974] loop9: detected capacity change from 0 to 512
[  442.183738][T22983] loop9: detected capacity change from 0 to 8192
[  442.646865][   T28] audit: type=1400 audit(1774269587.086:3505): avc:  denied  { ioctl } for  pid=22998 comm="syz.8.5589" path="socket:[118185]" dev="sockfs" ino=118185 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  442.909816][T23001] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5590'.
[  442.937148][T23001] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5590'.
[  442.986889][T23001] 8021q: VLANs not supported on vxcan1
[  442.998673][T23001] 8021q: VLANs not supported on vxcan1
[  443.228369][T23005] netlink: 'syz.9.5592': attribute type 1 has an invalid length.
[  443.270475][T23005] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5592'.
[  443.295370][T23005] veth1: entered promiscuous mode
[  443.300610][T23005] veth1: entered allmulticast mode
[  443.306794][T23015] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5596'.
[  443.323938][T23013] netlink: 'syz.3.5595': attribute type 1 has an invalid length.
[  443.339902][T23013] 8021q: adding VLAN 0 to HW filter on device bond10
[  443.348203][T23015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23015 comm=syz.8.5596
[  443.366694][T23013] vlan3: entered promiscuous mode
[  443.371759][T23013] bond10: entered promiscuous mode
[  443.378503][T23013] vlan3: entered allmulticast mode
[  443.383725][T23013] bond10: entered allmulticast mode
[  443.412058][T23013] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5595'.
[  443.438886][T23013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.450157][T23013] bond10: (slave batadv0): making interface the new active one
[  443.463622][T23013] batadv0: entered promiscuous mode
[  443.471100][T23013] batadv0: entered allmulticast mode
[  443.477289][T23013] bond10: (slave batadv0): Enslaving as an active interface with an up link
[  443.478475][T23024] netlink: 'syz.2.5599': attribute type 1 has an invalid length.
[  443.515816][T23020] lo speed is unknown, defaulting to 1000
[  443.571419][T23026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5599'.
[  443.618347][T23028] netlink: 'syz.3.5600': attribute type 1 has an invalid length.
[  443.644053][T23028] 8021q: adding VLAN 0 to HW filter on device bond12
[  443.654209][T23028] bond11: (slave bond12): making interface the new active one
[  443.662590][T23028] bond11: (slave bond12): Enslaving as an active interface with an up link
[  443.682740][T23024] 8021q: adding VLAN 0 to HW filter on device bond6
[  443.720145][T23030] batman_adv: batadv0: Interface deactivated: dummy0
[  443.786131][T23030] batman_adv: batadv0: Removing interface: dummy0
[  443.861131][T23030] bond6: (slave dummy0): making interface the new active one
[  443.899366][T23030] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  443.952023][T23028] bond11: (slave gretap3): Enslaving as a backup interface with an up link
[  443.961444][T23034] bond11: entered promiscuous mode
[  443.971039][T23034] bond12: entered promiscuous mode
[  444.016401][T23034] bond11: entered allmulticast mode
[  444.028298][T23034] bond12: entered allmulticast mode
[  444.068177][T23034] 8021q: adding VLAN 0 to HW filter on device bond11
[  444.564739][T23058] netlink: 'syz.2.5610': attribute type 1 has an invalid length.
[  444.594427][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5609'.
[  444.675219][T23058] 8021q: adding VLAN 0 to HW filter on device bond7
[  444.753906][T23061] vlan1: entered promiscuous mode
[  444.820541][T23061] bond7: entered promiscuous mode
[  444.826324][T23061] vlan1: entered allmulticast mode
[  444.832006][T23061] bond7: entered allmulticast mode
[  444.893805][T23066] bond7: (slave bridge11): making interface the new active one
[  444.972853][T23066] bridge11: entered promiscuous mode
[  444.982006][T23066] bridge11: entered allmulticast mode
[  445.002746][T23077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5616'.
[  445.014698][T23066] bond7: (slave bridge11): Enslaving as an active interface with an up link
[  445.024779][T23071] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  445.048279][T23077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5616'.
[  445.112590][T23087] loop9: detected capacity change from 0 to 128
[  445.129175][T23087] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  445.165552][T23092] 
: renamed from bond_slave_0
[  445.195535][T23087] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  445.439661][   T28] audit: type=1400 audit(1774269589.876:3506): avc:  denied  { setattr } for  pid=23086 comm="syz.9.5620" path="/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  445.523213][   T28] audit: type=1400 audit(1774269589.876:3507): avc:  denied  { ioctl } for  pid=23086 comm="syz.9.5620" path="/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop9" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  445.525010][T23103] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  446.070362][T23115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5627'.
[  446.578414][T22792] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  446.675865][T23123] netlink: 'syz.1.5632': attribute type 1 has an invalid length.
[  446.701229][T23123] 8021q: adding VLAN 0 to HW filter on device bond6
[  446.807288][T23127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23127 comm=syz.1.5632
[  446.840000][T23123] bond6: (slave gretap1): making interface the new active one
[  446.848249][T23123] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  446.891208][T23126] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.064213][T23126] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.391070][T23126] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.564517][   T28] audit: type=1400 audit(1774269591.996:3508): avc:  denied  { nlmsg_read } for  pid=23139 comm="syz.2.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  447.639279][T23126] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.718794][ T3688] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.731457][ T3688] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.749095][ T3688] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.764649][ T3688] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.843141][T23151] loop9: detected capacity change from 0 to 1024
[  447.857573][   T28] audit: type=1326 audit(1774269592.276:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  447.883206][T23151] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  447.907364][T23151] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  447.917162][   T28] audit: type=1326 audit(1774269592.276:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  447.961544][   T28] audit: type=1326 audit(1774269592.276:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  447.986202][   T28] audit: type=1326 audit(1774269592.276:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  448.010818][   T28] audit: type=1326 audit(1774269592.276:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  448.036033][   T28] audit: type=1326 audit(1774269592.276:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  448.061613][   T28] audit: type=1326 audit(1774269592.276:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  448.092722][   T28] audit: type=1326 audit(1774269592.276:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  448.117497][   T28] audit: type=1326 audit(1774269592.276:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  448.142131][   T28] audit: type=1326 audit(1774269592.276:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23150 comm="syz.9.5641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  448.188381][T23151] EXT4-fs (loop9): orphan cleanup on readonly fs
[  448.197240][T23151] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz.9.5641: Invalid inode table block 0 in block_group 0
[  448.246016][T23157] netlink: 'syz.2.5644': attribute type 1 has an invalid length.
[  448.266069][T23151] loop9: lost filesystem error report for type 5 error -117
[  448.273709][T23151] EXT4-fs (loop9): Remounting filesystem read-only
[  448.281051][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  448.281071][    C0] EXT4-fs (loop9): initial error at time 1774269592: __ext4_get_inode_loc:4782
[  448.281095][    C0] EXT4-fs (loop9): last error at time 1774269592: __ext4_get_inode_loc:4782
[  448.314842][T23151] EXT4-fs (loop9): 1 truncate cleaned up
[  448.322235][T23151] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  448.374253][T23157] 8021q: adding VLAN 0 to HW filter on device bond8
[  448.388085][T23158] bond8: (slave gretap3): making interface the new active one
[  448.406907][T23158] bond8: (slave gretap3): Enslaving as an active interface with an up link
[  448.410900][T23157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23157 comm=syz.2.5644
[  448.688712][T23169] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.697079][T23169] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.702087][T22792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.717695][T23174] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  448.908494][T23186] __nla_validate_parse: 5 callbacks suppressed
[  448.908512][T23186] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5652'.
[  449.849458][T23220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5663'.
[  450.101817][T23225] netlink: 'syz.8.5665': attribute type 1 has an invalid length.
[  450.116839][T23225] 8021q: adding VLAN 0 to HW filter on device bond14
[  450.162774][T23225] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5665'.
[  450.226033][T23225] bond14: entered promiscuous mode
[  450.231333][T23225] bond14: entered allmulticast mode
[  450.249778][T23229] bond14: (slave dummy0): making interface the new active one
[  450.300916][T23229] dummy0: entered promiscuous mode
[  450.330521][T23229] dummy0: entered allmulticast mode
[  450.346063][T23229] bond14: (slave dummy0): Enslaving as an active interface with an up link
[  450.389360][T23231] lo speed is unknown, defaulting to 1000
[  450.459515][T23241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5672'.
[  450.550796][T23244] netlink: 'syz.8.5671': attribute type 1 has an invalid length.
[  450.678446][T23244] 8021q: adding VLAN 0 to HW filter on device bond15
[  450.813258][T23241] bridge19: port 1(geneve2) entered blocking state
[  450.838581][T23241] bridge19: port 1(geneve2) entered disabled state
[  450.846579][T23244] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5671'.
[  450.862175][T23241] geneve2: entered allmulticast mode
[  450.868972][T23241] geneve2: entered promiscuous mode
[  450.899296][T23247] bond15: (slave veth13): Enslaving as an active interface with a down link
[  450.917226][T23248] bond14: (slave dummy0): Releasing active interface
[  450.924016][T23248] dummy0: left promiscuous mode
[  450.932955][T23248] dummy0: left allmulticast mode
[  450.955981][T23248] bond15: (slave dummy0): making interface the new active one
[  450.964940][T23248] dummy0: entered promiscuous mode
[  450.970763][T23248] bond15: (slave dummy0): Enslaving as an active interface with an up link
[  450.982930][T23257] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5673'.
[  451.000253][T23244] bond15: (slave dummy0): Releasing active interface
[  451.007547][T23244] dummy0 (unregistering): left promiscuous mode
[  452.499378][T23284] loop9: detected capacity change from 0 to 512
[  452.520797][T23284] EXT4-fs: Ignoring removed bh option
[  452.528405][T23284] EXT4-fs: inline encryption not supported
[  452.751559][T23284] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.5682: missing EA_INODE flag
[  452.769119][T23284] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  452.769377][T23284] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.5682: error while reading EA inode 11 err=-117
[  452.778581][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  452.778598][    C0] EXT4-fs (loop9): initial error at time 1774269597: ext4_xattr_inode_iget:441: inode 11
[  452.778626][    C0] EXT4-fs (loop9): last error at time 1774269597: ext4_xattr_inode_iget:441: inode 11
[  452.866269][T23284] loop9: lost filesystem error report for type 5 error -117
[  452.866502][T23284] EXT4-fs (loop9): 1 orphan inode deleted
[  452.890167][T23284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.106307][T22792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.193596][T23312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.212550][T23312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.198043][T23343] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  455.624926][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5703'.
[  455.653151][T23356] lo speed is unknown, defaulting to 1000
[  455.677467][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5703'.
[  455.699558][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5703'.
[  455.718433][T23354] 8021q: adding VLAN 0 to HW filter on device bond7
[  455.732051][   T28] kauditd_printk_skb: 106 callbacks suppressed
[  455.732097][   T28] audit: type=1400 audit(1774269600.176:3623): avc:  denied  { getopt } for  pid=23355 comm="syz.3.5704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  455.767817][T23357] bridge0: port 3(bond0) entered disabled state
[  455.774566][T23357] bond0: left allmulticast mode
[  455.774584][T23354] netlink: 'syz.1.5703': attribute type 4 has an invalid length.
[  455.780282][T23357] bond_slave_0: left allmulticast mode
[  455.793328][T23357] bond_slave_1: left allmulticast mode
[  455.798952][T23357] bond0: left promiscuous mode
[  455.804255][T23357] bond_slave_0: left promiscuous mode
[  455.810690][T23357] bond_slave_1: left promiscuous mode
[  455.818454][T23354] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5703'.
[  455.823285][T23357] bridge0: port 3(bond0) entered disabled state
[  455.847372][T23357] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.856614][T23357] bond7: (slave bond0): making interface the new active one
[  455.876264][T23357] bond7: (slave bond0): Enslaving as an active interface with an up link
[  455.909117][T23354] .`: renamed from bond0 (while UP)
[  456.066219][   T83] bond7: (slave .`): link status definitely down, disabling slave
[  456.083569][   T83] bond7: now running without any active interface!
[  456.322036][   T28] audit: type=1107 audit(1774269600.756:3624): pid=23383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  456.512786][T23388] lo speed is unknown, defaulting to 1000
[  457.861900][T23409] syzkaller0: entered allmulticast mode
[  458.159583][   T28] audit: type=1400 audit(1774269602.536:3625): avc:  denied  { read } for  pid=23419 comm="syz.9.5723" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  458.418730][   T28] audit: type=1400 audit(1774269602.536:3626): avc:  denied  { open } for  pid=23419 comm="syz.9.5723" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  459.044232][T23434] loop9: detected capacity change from 0 to 512
[  459.086788][T23434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.241850][T23434] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  459.545245][T22792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.672367][T23452] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[  459.729654][   T28] audit: type=1400 audit(1774269604.176:3627): avc:  denied  { relabelto } for  pid=23448 comm="syz.8.5732" name="869" dev="tmpfs" ino=4524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  459.792051][ T3392] IPVS: starting estimator thread 0...
[  459.798434][   T28] audit: type=1400 audit(1774269604.206:3628): avc:  denied  { associate } for  pid=23448 comm="syz.8.5732" name="869" dev="tmpfs" ino=4524 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768"
[  459.828478][   T28] audit: type=1400 audit(1774269604.216:3629): avc:  denied  { add_name } for  pid=23448 comm="syz.8.5732" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  459.855999][   T28] audit: type=1400 audit(1774269604.216:3630): avc:  denied  { create } for  pid=23448 comm="syz.8.5732" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  459.917154][T23447] IPVS: using max 2160 ests per chain, 108000 per kthread
[  459.924635][   T28] audit: type=1400 audit(1774269604.216:3631): avc:  denied  { associate } for  pid=23448 comm="syz.8.5732" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  459.955334][   T28] audit: type=1400 audit(1774269604.286:3632): avc:  denied  { remove_name } for  pid=7829 comm="syz-executor" name="file0" dev="tmpfs" ino=4529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  460.033586][T23463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  460.092877][T23473] bond3: option mode: unable to set because the bond device has slaves
[  460.140492][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5742'.
[  460.149943][T23473] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5742'.
[  460.161526][T23473] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.173817][T23473] bond3: (slave bond0): Enslaving as a backup interface with a down link
[  460.197973][T23473] bond3: (slave bond0): Releasing backup interface
[  460.224872][T23473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  460.318874][T23488] netlink: 'syz.2.5747': attribute type 1 has an invalid length.
[  460.320653][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'.
[  460.358902][T23488] 8021q: adding VLAN 0 to HW filter on device bond9
[  460.386619][T23488] bond9: (slave veth23): Enslaving as an active interface with a down link
[  460.410420][T23488] bond6: (slave dummy0): Releasing active interface
[  460.423498][T23488] bond9: (slave dummy0): making interface the new active one
[  460.432060][T23488] dummy0: entered promiscuous mode
[  460.434163][T23491] loop9: detected capacity change from 0 to 512
[  460.438608][T23488] bond9: (slave dummy0): Enslaving as an active interface with an up link
[  460.453521][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'.
[  460.505820][T23488] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5747'.
[  460.549454][T23491] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.5748: corrupted in-inode xattr: e_value out of bounds
[  460.554995][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'.
[  460.591063][T23491] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  460.593964][T23491] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5748: couldn't read orphan inode 15 (err -117)
[  460.603264][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  460.603281][    C1] EXT4-fs (loop9): initial error at time 1774269605: ext4_iget_extra_inode:5025: inode 15
[  460.603313][    C1] EXT4-fs (loop9): last error at time 1774269605: ext4_iget_extra_inode:5025: inode 15
[  460.643257][T23491] loop9: lost filesystem error report for type 5 error -117
[  460.643859][T23488] bond9: (slave dummy0): Releasing active interface
[  460.644080][T23491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.652441][T23488] dummy0 (unregistering): left promiscuous mode
[  460.682534][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'.
[  460.696906][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'.
[  460.876575][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'.
[  460.888838][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'.
[  460.916708][T22792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.962699][T23511] netlink: 'syz.3.5755': attribute type 13 has an invalid length.
[  461.937876][T23525] xt_hashlimit: size too large, truncated to 1048576
[  462.172527][T23520] bond13: left promiscuous mode
[  462.177465][T23520] bridge13: left promiscuous mode
[  462.184387][T23520] bond14: left promiscuous mode
[  462.190782][ T3670] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.202265][ T3670] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.238626][ T3670] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.288059][ T3670] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.318580][T23531] bond6: option mode: unable to set because the bond device has slaves
[  462.356519][T23531] 8021q: adding VLAN 0 to HW filter on device bond6
[  464.365787][T23561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5764'.
[  464.376088][T23561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5764'.
[  464.387418][T23561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5764'.
[  464.396772][T23561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5764'.
[  464.911735][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5769'.
[  464.927615][T23569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5769'.
[  465.431643][T23581] veth1: left promiscuous mode
[  465.547463][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.246177][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.326763][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  467.024043][T23614] __nla_validate_parse: 2 callbacks suppressed
[  467.024061][T23614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5782'.
[  467.856894][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'.
[  467.980726][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'.
[  468.108861][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'.
[  468.444914][T23646] .`: (slave bridge0): Releasing backup interface
[  468.529565][T23646] bridge_slave_0: left promiscuous mode
[  468.542800][T23646] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.556622][T23652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5791'.
[  468.646078][T23646] .`: (slave bond_slave_0): Releasing backup interface
[  468.673073][T23646] .`: (slave bond_slave_1): Releasing backup interface
[  468.718219][T23646] team0: Port device team_slave_1 removed
[  468.725051][T23646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  468.775150][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'.
[  468.786830][T23647] team0: Mode changed to "loadbalance"
[  468.824261][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'.
[  468.848997][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'.
[  468.859982][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'.
[  468.901676][T23675] vlan4: entered allmulticast mode
[  468.907119][T23675] bond6: entered allmulticast mode
[  469.268577][T23688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5800'.
[  470.146410][T23712] loop9: detected capacity change from 0 to 512
[  470.155540][T23712] xt_hashlimit: size too large, truncated to 1048576
[  470.359814][T23719] netlink: 'syz.1.5820': attribute type 1 has an invalid length.
[  470.401562][T23719] bond0: entered promiscuous mode
[  470.407714][T23719] bond0: entered allmulticast mode
[  470.413335][T23719] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.448558][T23719] erspan1: entered allmulticast mode
[  470.466842][T23719] bond0: (slave erspan1): making interface the new active one
[  470.483031][T23719] erspan1: entered promiscuous mode
[  470.499056][T23719] bond0: (slave erspan1): Enslaving as an active interface with an up link
[  470.646830][T23719] bond0 (unregistering): (slave erspan1): Releasing active interface
[  470.657844][T23719] erspan1: left promiscuous mode
[  470.690508][T23719] bond0 (unregistering): Released all slaves
[  470.916932][T23739] IPv6: NLM_F_CREATE should be specified when creating new route
[  471.039188][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  471.039202][   T28] audit: type=1400 audit(1774269615.486:3636): avc:  denied  { ioctl } for  pid=23740 comm="syz.1.5815" path="socket:[121938]" dev="sockfs" ino=121938 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  471.108116][   T28] audit: type=1326 audit(1774269615.546:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  471.155932][   T28] audit: type=1326 audit(1774269615.546:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  471.217265][   T28] audit: type=1326 audit(1774269615.546:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  471.255878][   T28] audit: type=1326 audit(1774269615.546:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  471.283904][T23751] netlink: 'syz.3.5822': attribute type 4 has an invalid length.
[  471.295886][T23751] netlink: 'syz.3.5822': attribute type 4 has an invalid length.
[  471.315146][   T28] audit: type=1326 audit(1774269615.546:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  471.811861][   T28] audit: type=1326 audit(1774269615.546:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  471.837428][   T28] audit: type=1326 audit(1774269615.546:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  471.870519][   T28] audit: type=1326 audit(1774269615.546:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  471.904359][   T28] audit: type=1326 audit(1774269615.546:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23742 comm="syz.1.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  472.881063][T23784] syz.9.5839 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  472.928159][T23784] CPU: 0 UID: 0 PID: 23784 Comm: syz.9.5839 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  472.928189][T23784] Tainted: [W]=WARN
[  472.928195][T23784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  472.928245][T23784] Call Trace:
[  472.928251][T23784]  <TASK>
[  472.928258][T23784]  __dump_stack+0x1d/0x30
[  472.928279][T23784]  dump_stack_lvl+0x95/0xd0
[  472.928296][T23784]  dump_stack+0x15/0x1b
[  472.928314][T23784]  dump_header+0x80/0x240
[  472.928363][T23784]  oom_kill_process+0x295/0x350
[  472.928449][T23784]  out_of_memory+0x97d/0xb80
[  472.928467][T23784]  try_charge_memcg+0x62e/0xa10
[  472.928540][T23784]  obj_cgroup_charge_pages+0x23/0xc0
[  472.928561][T23784]  __memcg_kmem_charge_page+0x9e/0x170
[  472.928583][T23784]  __alloc_frozen_pages_noprof+0x18a/0x360
[  472.928678][T23784]  alloc_pages_mpol+0xb3/0x260
[  472.928775][T23784]  alloc_pages_noprof+0x8f/0x130
[  472.928807][T23784]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  472.928858][T23784]  __kvmalloc_node_noprof+0x3d4/0x650
[  472.928909][T23784]  ? futex_hash_allocate+0x190/0x9d0
[  472.928934][T23784]  ? futex_hash_allocate+0x190/0x9d0
[  472.928960][T23784]  futex_hash_allocate+0x190/0x9d0
[  472.929077][T23784]  ? cap_task_prctl+0x13f/0x6e0
[  472.929100][T23784]  futex_hash_prctl+0xd8/0xf0
[  472.929119][T23784]  __se_sys_prctl+0xa3d/0x13f0
[  472.929174][T23784]  __x64_sys_prctl+0x67/0x80
[  472.929200][T23784]  x64_sys_call+0x2533/0x3020
[  472.929243][T23784]  do_syscall_64+0x12c/0x370
[  472.929269][T23784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.929288][T23784] RIP: 0033:0x7fbc2fe3c799
[  472.929304][T23784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.929345][T23784] RSP: 002b:00007fbc2e897028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  472.929364][T23784] RAX: ffffffffffffffda RBX: 00007fbc300b5fa0 RCX: 00007fbc2fe3c799
[  472.929425][T23784] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  472.929434][T23784] RBP: 00007fbc2fed2c99 R08: 0000000000000000 R09: 0000000000000000
[  472.929445][T23784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  472.929454][T23784] R13: 00007fbc300b6038 R14: 00007fbc300b5fa0 R15: 00007ffc40b83e78
[  472.929469][T23784]  </TASK>
[  472.931649][T23784] memory: usage 307192kB, limit 307200kB, failcnt 166
[  473.171295][T23784] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0
[  473.180232][T23784] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  473.187878][T23784] Memory cgroup stats for /syz9:
[  473.188330][T23784] cache 0
[  473.196246][T23784] rss 4096
[  473.199266][T23784] shmem 0
[  473.202208][T23784] mapped_file 0
[  473.257683][T23784] dirty 0
[  473.260657][T23784] writeback 0
[  473.264095][T23784] workingset_refault_anon 798
[  473.336212][T23784] workingset_refault_file 0
[  473.340844][T23784] swap 368640
[  473.344123][T23784] swapcached 372736
[  473.348252][T23784] pgpgin 27171
[  473.351627][T23784] pgpgout 27168
[  473.355192][T23784] pgfault 31844
[  473.370900][T23784] pgmajfault 108
[  473.376977][T23784] inactive_anon 4096
[  473.540373][T23802] netlink: 'syz.3.5834': attribute type 13 has an invalid length.
[  473.551025][T23784] active_anon 4096
[  473.558762][T23784] inactive_file 4096
[  473.569224][T23784] active_file 0
[  473.584617][T23784] unevictable 0
[  473.602338][T23784] hierarchical_memory_limit 314572800
[  473.639678][T23784] hierarchical_memsw_limit 9223372036854771712
[  473.661699][T23784] total_cache 0
[  473.673693][T23784] total_rss 4096
[  473.683660][T23784] total_shmem 0
[  473.729424][T23784] total_mapped_file 0
[  473.739642][T23784] total_dirty 0
[  473.747043][T23784] total_writeback 0
[  473.754320][T23784] total_workingset_refault_anon 798
[  473.768730][T23784] total_workingset_refault_file 0
[  473.779795][T23784] total_swap 368640
[  473.789145][T23784] total_swapcached 372736
[  473.795921][T23784] total_pgpgin 27171
[  473.806338][T23784] total_pgpgout 27168
[  473.815702][T23784] total_pgfault 31844
[  473.824139][T23784] total_pgmajfault 108
[  473.833860][T23784] total_inactive_anon 4096
[  473.843401][T23784] total_active_anon 4096
[  473.853209][T23784] total_inactive_file 4096
[  473.866076][T23784] total_active_file 0
[  473.873900][T23784] total_unevictable 0
[  473.883537][T23784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5839,pid=23783,uid=0
[  473.905771][T23784] Memory cgroup out of memory: Killed process 23783 (syz.9.5839) total-vm:96080kB, anon-rss:1228kB, file-rss:22172kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  474.007953][T23810] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  474.057839][T23815] netlink: 'syz.8.5840': attribute type 13 has an invalid length.
[  474.093156][T23820] __nla_validate_parse: 9 callbacks suppressed
[  474.093173][T23820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5841'.
[  474.188616][T23826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5843'.
[  474.202518][T23818] erspan0: left allmulticast mode
[  474.208545][T23818] erspan0: left promiscuous mode
[  474.213751][T23818] bridge18: port 1(erspan0) entered disabled state
[  474.240559][T23818] bond7: (slave .`): Releasing active interface
[  474.253162][T23818] veth0_to_bridge: left allmulticast mode
[  474.259774][T23818] veth0_to_bridge: left promiscuous mode
[  474.266955][T23818] Ÿë
: port 1(veth0_to_bridge) entered disabled state
[  474.274814][T23818] bridge_slave_0: left promiscuous mode
[  474.281655][T23818] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.290403][T23818] bridge_slave_1: left allmulticast mode
[  474.296537][T23818] bridge_slave_1: left promiscuous mode
[  474.302383][T23818] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.311484][T23818] .`: (slave bond_slave_0): Releasing backup interface
[  474.320939][T23818] .`: (slave bond_slave_1): Releasing backup interface
[  474.334011][T23818] veth0_to_team: left allmulticast mode
[  474.339722][T23818] veth0_to_team: left promiscuous mode
[  474.345662][T23818] Ÿë
: port 2(veth0_to_team) entered disabled state
[  474.355006][T23818] team0: Port device team_slave_0 removed
[  474.363189][T23818] team0: Port device team_slave_1 removed
[  474.369737][T23818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  474.387401][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5838'.
[  474.471226][T23822] team0: No ports can be present during mode change
[  474.482791][T23826] team0 (unregistering): Port device bridge12 removed
[  474.503521][T23835] 8021q: adding VLAN 0 to HW filter on device bond1
[  474.520516][T23835] bond1: (slave ip6gretap1): making interface the new active one
[  474.530357][T23835] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  474.638186][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  474.670722][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  474.677630][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  474.684368][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  474.691150][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  474.698066][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  474.704779][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  474.711635][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  474.718416][T23841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  475.845857][T23863] xt_CT: No such helper "snmp_trap"
[  475.863067][T23876] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.5859'.
[  475.876018][T23871] netlink: 'syz.2.5858': attribute type 39 has an invalid length.
[  475.893934][T23876] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  477.016843][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  477.016858][   T28] audit: type=1400 audit(1774269621.456:3671): avc:  denied  { mounton } for  pid=23914 comm="syz.9.5869" path="/proc/165/cgroup" dev="proc" ino=123110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  477.425781][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5879'.
[  477.435936][   T28] audit: type=1326 audit(1774269621.836:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  477.473052][   T28] audit: type=1326 audit(1774269621.836:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  477.507586][   T28] audit: type=1326 audit(1774269621.836:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  477.537120][T23947] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5877'.
[  477.573514][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5875'.
[  477.587992][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5875'.
[  477.597930][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5875'.
[  477.608673][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5875'.
[  478.403290][   T28] audit: type=1326 audit(1774269621.836:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  479.272131][   T28] audit: type=1326 audit(1774269621.836:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  479.297620][   T28] audit: type=1326 audit(1774269621.836:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  479.321808][   T28] audit: type=1326 audit(1774269621.836:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  479.428431][   T28] audit: type=1326 audit(1774269621.836:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  479.536401][   T28] audit: type=1326 audit(1774269621.836:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  479.823335][T23965] syzkaller0: entered promiscuous mode
[  479.829074][T23965] syzkaller0: entered allmulticast mode
[  480.104388][T23967] 9p: Bad value for 'rfdno'
[  480.458948][T23982] loop9: detected capacity change from 0 to 512
[  480.529920][T23982] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  480.559854][T23982] EXT4-fs (loop9): orphan file too big: 4294967295
[  480.579105][T23982] EXT4-fs (loop9): mount failed
[  480.764643][T23990] netlink: 'syz.1.5895': attribute type 4 has an invalid length.
[  480.789539][T23990] netlink: 'syz.1.5895': attribute type 4 has an invalid length.
[  480.844807][T23998] loop9: detected capacity change from 0 to 1024
[  480.854215][T23998] EXT4-fs: Ignoring removed nomblk_io_submit option
[  480.976142][T24005] __nla_validate_parse: 2 callbacks suppressed
[  480.976166][T24005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5900'.
[  481.328159][T24011] ipvlan2: entered allmulticast mode
[  481.341261][T24011] dummy0: entered allmulticast mode
[  481.578896][T23998] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.799785][T22792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.172969][T24033] netlink: 'syz.3.5905': attribute type 27 has an invalid length.
[  482.242207][T24033] vlan3: left promiscuous mode
[  482.266489][T24033] bond10: left promiscuous mode
[  482.271479][T24033] batadv0: left promiscuous mode
[  482.409433][T24033] vlan3: left allmulticast mode
[  482.462813][T24033] bond10: left allmulticast mode
[  482.535941][T24033] batadv0: left allmulticast mode
[  482.577011][T24033] bond11: left promiscuous mode
[  482.581938][T24033] bond12: left promiscuous mode
[  482.590085][T24033] bond11: left allmulticast mode
[  482.600132][T24033] bond12: left allmulticast mode
[  483.159378][T24059] loop9: detected capacity change from 0 to 128
[  485.052985][   T28] kauditd_printk_skb: 128 callbacks suppressed
[  485.052999][   T28] audit: type=1326 audit(1774269629.496:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  485.114130][   T28] audit: type=1326 audit(1774269629.496:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  485.173770][   T28] audit: type=1326 audit(1774269629.496:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  485.275289][   T28] audit: type=1326 audit(1774269629.496:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  485.370094][   T28] audit: type=1326 audit(1774269629.496:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24094 comm="syz.1.5925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  487.760258][T24146] loop9: detected capacity change from 0 to 1024
[  487.784772][T24146] netlink: 'syz.9.5938': attribute type 13 has an invalid length.
[  488.046236][    C0] net_ratelimit: 3322 callbacks suppressed
[  488.046254][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  489.071713][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  489.189922][T24187] xt_CT: No such helper "snmp_trap"
[  489.236025][T24190] netlink: 'syz.2.5952': attribute type 13 has an invalid length.
[  489.735789][T24205] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.5958'.
[  489.745087][T24205] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  489.843652][T24217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  489.872505][T24217] team0: Mode changed to "loadbalance"
[  489.879425][T24217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5962'.
[  489.901536][T24221] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  490.064853][   T28] audit: type=1400 audit(1774269634.506:3814): avc:  denied  { write } for  pid=24228 comm="syz.9.5967" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  490.110524][T24231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'.
[  490.164388][T24231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'.
[  490.243055][T24238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5969'.
[  490.253197][T24238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5969'.
[  490.443083][T24243] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.5971'.
[  490.470433][T24243] bridge: RTM_NEWNEIGH bridge10 without NUD_PERMANENT
[  490.492951][T24244] xt_CT: No such helper "snmp_trap"
[  490.537548][T24251] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  490.597891][T24256] netlink: 'syz.3.5975': attribute type 1 has an invalid length.
[  490.612801][T24256] 8021q: adding VLAN 0 to HW filter on device bond13
[  490.632745][T24256] ipvlan2: entered promiscuous mode
[  490.638798][T24256] ipvlan2: entered allmulticast mode
[  490.644785][T24256] bond13: entered allmulticast mode
[  490.659466][T24256] bond13: (slave ip6gretap2): making interface the new active one
[  490.668114][T24256] ip6gretap2: entered allmulticast mode
[  490.674530][T24256] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link
[  490.936389][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'.
[  490.947677][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'.
[  490.958213][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'.
[  491.682369][T24278] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  493.880747][T24324] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  493.997330][T24331] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  494.091427][T24330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.171756][T24330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.085539][T24350] netlink: 'syz.1.6003': attribute type 13 has an invalid length.
[  496.903664][T24381] __nla_validate_parse: 15 callbacks suppressed
[  496.903680][T24381] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6013'.
[  496.933770][T24381] bridge: RTM_NEWNEIGH bridge10 without NUD_PERMANENT
[  496.976355][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  497.061834][T24389] netlink: 'syz.3.6017': attribute type 32 has an invalid length.
[  497.086679][T24385] lo speed is unknown, defaulting to 1000
[  497.094376][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'.
[  497.111527][T24389] bond14: Setting coupled_control to off (0)
[  497.542281][T24399] bridge_slave_0: left allmulticast mode
[  497.548402][T24399] bridge_slave_0: left promiscuous mode
[  497.554112][T24399] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.564296][T24399] bridge_slave_1: left allmulticast mode
[  497.570454][T24399] bridge_slave_1: left promiscuous mode
[  497.577121][T24399] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.587899][T24399] bond0: (slave bond_slave_0): Releasing backup interface
[  497.598745][T24399] bond0: (slave bond_slave_1): Releasing backup interface
[  497.613665][T24399] team0: Port device team_slave_0 removed
[  497.629320][T24399] team0: Port device team_slave_1 removed
[  497.637121][T24399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  497.644497][T24399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  497.702501][T24399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  497.718707][T24399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  497.729671][T24399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  498.010946][T24411] netlink: 'syz.8.6021': attribute type 13 has an invalid length.
[  498.354068][   T28] audit: type=1326 audit(1774269642.796:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.381403][   T28] audit: type=1326 audit(1774269642.796:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.428141][   T28] audit: type=1326 audit(1774269642.796:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.469860][   T28] audit: type=1326 audit(1774269642.826:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.495945][   T28] audit: type=1326 audit(1774269642.826:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.520526][   T28] audit: type=1326 audit(1774269642.826:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.563296][   T28] audit: type=1326 audit(1774269642.996:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.616544][   T28] audit: type=1326 audit(1774269642.996:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.647619][T24421] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  498.663448][   T28] audit: type=1326 audit(1774269642.996:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.712314][   T28] audit: type=1326 audit(1774269642.996:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.9.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2fe3c799 code=0x7ffc0000
[  498.766229][T24427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6026'.
[  498.790852][T24430] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6027'.
[  498.802592][T24430] bridge: RTM_NEWNEIGH bridge10 without NUD_PERMANENT
[  498.809866][T24432] netlink: 'syz.1.6028': attribute type 13 has an invalid length.
[  499.162321][T24449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24449 comm=syz.1.6033
[  499.606844][T24455] lo speed is unknown, defaulting to 1000
[  499.863296][T24468] netlink: 'syz.8.6037': attribute type 1 has an invalid length.
[  499.888307][T24468] 8021q: adding VLAN 0 to HW filter on device bond16
[  500.389258][T24474] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.6040'.
[  500.399678][T24474] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  500.422796][T24477] lo speed is unknown, defaulting to 1000
[  500.703615][T24500] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.6049'.
[  500.714176][T24500] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  500.769145][T24506] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6060'.
[  500.781666][T24506] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  500.841990][T24511] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6062'.
[  500.851974][T24511] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  500.934875][T24518] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6064'.
[  500.990809][T24518] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  501.039137][T24522] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6052'.
[  501.074448][T24522] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  501.141500][T24526] ipip0: entered promiscuous mode
[  501.196731][T24530] ªªªªªª: renamed from vlan0
[  501.581180][T24540] ipvlan1: entered allmulticast mode
[  501.587231][T24540] dummy0: entered allmulticast mode
[  502.231714][T24550] __nla_validate_parse: 2 callbacks suppressed
[  502.231749][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'.
[  502.251087][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'.
[  502.261536][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'.
[  502.272046][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'.
[  502.282534][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'.
[  502.292500][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'.
[  502.544247][T24552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24552 comm=syz.8.6063
[  502.610717][T24554] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6067'.
[  502.619980][T24554] bridge: RTM_NEWNEIGH bridge10 without NUD_PERMANENT
[  502.646622][T24556] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6066'.
[  502.656692][T24556] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  502.807482][T24562] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6069'.
[  502.831481][T24562] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  502.993507][T24572] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6070'.
[  503.430567][T24580] netlink: 'syz.8.6077': attribute type 13 has an invalid length.
[  504.257085][T24617] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  504.318452][T24619] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  505.019273][T24636] ªªªªªª: renamed from hsr0
[  505.122771][T24640] netlink: 'syz.9.6090': attribute type 13 has an invalid length.
[  505.585934][T24649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.600406][T24649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.913731][T24682] netlink: 'syz.3.6106': attribute type 13 has an invalid length.
[  507.422635][T24691] Set syz1 is full, maxelem 65536 reached
[  507.853637][T24699] loop9: detected capacity change from 0 to 128
[  508.614489][T24709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24709 comm=syz.3.6115
[  508.837640][   T28] kauditd_printk_skb: 241 callbacks suppressed
[  508.837653][   T28] audit: type=1400 audit(1774269653.286:4066): avc:  denied  { setattr } for  pid=24713 comm="syz.2.6117" name="TIPC" dev="sockfs" ino=130619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  508.976236][T24717] __nla_validate_parse: 11 callbacks suppressed
[  508.976266][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6118'.
[  509.436727][T24728] netlink: 'syz.2.6121': attribute type 1 has an invalid length.
[  509.458868][T24728] 8021q: adding VLAN 0 to HW filter on device bond10
[  509.564565][T24730] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.6123'.
[  509.617396][T24730] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  509.692903][T24739] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.6134'.
[  509.709617][T24739] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  509.876156][   T28] audit: type=1326 audit(1774269654.326:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  509.922085][   T28] audit: type=1326 audit(1774269654.346:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  509.946508][   T28] audit: type=1326 audit(1774269654.356:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  509.970275][   T28] audit: type=1326 audit(1774269654.356:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  509.994731][   T28] audit: type=1326 audit(1774269654.356:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  510.019272][   T28] audit: type=1326 audit(1774269654.396:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f328f79cfce code=0x7ffc0000
[  510.043232][   T28] audit: type=1326 audit(1774269654.396:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f328f79cfce code=0x7ffc0000
[  510.080072][   T28] audit: type=1326 audit(1774269654.396:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  510.105017][   T28] audit: type=1326 audit(1774269654.396:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.2.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  510.464397][T24758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24758 comm=syz.2.6129
[  510.862083][T24763] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6131'.
[  510.957909][T24769] netlink: 'syz.9.6135': attribute type 1 has an invalid length.
[  510.974115][T24769] 8021q: adding VLAN 0 to HW filter on device bond2
[  511.000701][T24769] bond2: (slave dummy0): making interface the new active one
[  511.090064][T24769] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  511.318182][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6139'.
[  511.597668][T24787] ªªªªªª: renamed from hsr0 (while UP)
[  511.811329][T24767] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6133'.
[  511.861750][T24767] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6133'.
[  512.664092][T24797] lo: Caught tx_queue_len zero misconfig
[  512.736087][T24797] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  513.639494][ T4297] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.663932][ T4297] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.677604][T24809] lo speed is unknown, defaulting to 1000
[  513.684038][ T4297] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.716275][ T4297] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  514.102295][T24841] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6156'.
[  514.112382][T24841] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6156'.
[  514.124781][T24841] syz_tun: entered promiscuous mode
[  514.146968][T24841] erspan0: entered promiscuous mode
[  514.157734][T24841] hsr0: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  514.192257][T24841] hsr0: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network
[  514.235055][T24836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6154'.
[  514.290377][T24844] tipc: Started in network mode
[  514.324757][T24844] tipc: Node identity ee44427189b9, cluster identity 4711
[  514.375532][T24844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  514.406328][T24844] syzkaller0: entered promiscuous mode
[  514.423786][T24844] syzkaller0: entered allmulticast mode
[  514.449776][T24844] tipc: Resetting bearer <eth:syzkaller0>
[  514.461198][T24843] tipc: Resetting bearer <eth:syzkaller0>
[  514.480617][T24843] tipc: Disabling bearer <eth:syzkaller0>
[  514.855755][T24854] netlink: 'syz.8.6161': attribute type 1 has an invalid length.
[  514.912978][T24854] 8021q: adding VLAN 0 to HW filter on device bond17
[  514.922950][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6161'.
[  514.938404][T24854] bond17: (slave bridge14): making interface the new active one
[  514.947122][T24854] bond17: (slave bridge14): Enslaving as an active interface with an up link
[  514.963310][T24854] macvlan0: entered promiscuous mode
[  514.969709][T24854] macvlan0: entered allmulticast mode
[  514.975809][T24854] bond17: entered promiscuous mode
[  515.056563][T24854] bridge14: entered promiscuous mode
[  515.072656][T24854] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  515.146499][T24854] bond17: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  515.164315][T24854] bond17: left promiscuous mode
[  515.170443][T24854] bridge14: left promiscuous mode
[  515.976681][T24861] lo speed is unknown, defaulting to 1000
[  516.405993][T24874] lo speed is unknown, defaulting to 1000
[  516.603747][T24880] ªªªªªª: renamed from vlan0
[  516.621301][T24880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6168'.
[  516.631273][T24880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6168'.
[  517.528445][T24915] lo speed is unknown, defaulting to 1000
[  518.116292][T24935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6182'.
[  518.857977][T24944] loop9: detected capacity change from 0 to 512
[  518.892246][T24944] EXT4-fs (loop9): can't mount with commit=, fs mounted w/o journal
[  519.026682][T24954] loop9: detected capacity change from 0 to 512
[  519.076419][T24954] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  519.114708][T24954] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  519.162285][T24954] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6187: Corrupt directory, running e2fsck is recommended
[  519.204769][T24954] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  519.242163][T24954] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.6187: corrupted in-inode xattr: invalid ea_ino
[  519.287688][T24954] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  519.287877][T24954] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6187: couldn't read orphan inode 15 (err -117)
[  519.297794][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  519.297818][    C1] EXT4-fs (loop9): initial error at time 1774269663: ext4_iget_extra_inode:5025: inode 15
[  519.297859][    C1] EXT4-fs (loop9): last error at time 1774269663: ext4_iget_extra_inode:5025: inode 15
[  519.427264][T24954] loop9: lost filesystem error report for type 5 error -117
[  519.432367][T24954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.456785][T24961] xt_hashlimit: size too large, truncated to 1048576
[  519.514996][T24962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6188'.
[  519.533702][T24954] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  519.545728][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6188'.
[  519.565051][T24954] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  519.577794][T24954] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6187: Corrupt directory, running e2fsck is recommended
[  519.597364][T24954] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  519.616443][T24954] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  519.638050][T24954] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6187: Corrupt directory, running e2fsck is recommended
[  519.661323][T24954] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  519.673916][T24954] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  519.700244][T24954] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6187: Corrupt directory, running e2fsck is recommended
[  519.714051][T24954] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.6187: path /108/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  519.736023][T24954] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 2: comm syz.9.6187: path /108/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[  519.757208][T24954] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 8: comm syz.9.6187: path /108/file0: bad entry in directory: directory entry overrun - offset=0, inode=33261, rec_len=132120, size=1024 fake=0
[  519.909897][T22792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.926830][T24975] netlink: 'syz.8.6192': attribute type 1 has an invalid length.
[  520.105587][T24975] 8021q: adding VLAN 0 to HW filter on device bond19
[  520.127904][T24993] loop9: detected capacity change from 0 to 2048
[  520.427530][T24993] GPT:first_usable_lbas don't match.
[  520.432979][T24993] GPT:34 != 290
[  520.437446][T24993] GPT: Use GNU Parted to correct GPT errors.
[  520.447232][T24993]  loop9: p1 p2 p3
[  520.447578][T24986] lo speed is unknown, defaulting to 1000
[  521.341452][T25026] tipc: Enabled bearer <eth:geneve1>, priority 12
[  522.313503][T25037] netlink: 'syz.1.6207': attribute type 1 has an invalid length.
[  522.410830][T25039] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6208'.
[  522.412263][T25037] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.483374][T25040] bond0: (slave dummy0): making interface the new active one
[  522.506929][T25040] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  523.062107][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6216'.
[  524.443551][   T28] kauditd_printk_skb: 45 callbacks suppressed
[  524.443564][   T28] audit: type=1326 audit(1774269668.886:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  524.607490][   T28] audit: type=1326 audit(1774269668.886:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  524.848715][   T28] audit: type=1326 audit(1774269668.886:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  525.274877][T25096] bond12: entered promiscuous mode
[  525.318180][   T28] audit: type=1326 audit(1774269668.886:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  525.419730][T25100] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6226'.
[  525.523899][   T28] audit: type=1326 audit(1774269668.886:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  525.534837][T25100] bond3: option lacp_active: invalid value (5)
[  525.559346][   T28] audit: type=1326 audit(1774269668.886:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  525.630069][   T28] audit: type=1326 audit(1774269668.886:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  525.631169][T25100] bond3 (unregistering): Released all slaves
[  525.655541][   T28] audit: type=1326 audit(1774269668.886:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  525.684644][   T28] audit: type=1326 audit(1774269668.886:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  525.710491][   T28] audit: type=1326 audit(1774269668.886:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25083 comm="syz.8.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fa83c799 code=0x7ffc0000
[  525.809984][T25108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25108 comm=syz.8.6228
[  525.852722][T25109] bond2: left allmulticast mode
[  525.867049][T25109] bond2: left promiscuous mode
[  526.076941][T25119] netlink: 'syz.8.6232': attribute type 4 has an invalid length.
[  526.084788][T25121] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6233'.
[  526.104934][T25121] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  526.206694][T25130] 9pnet_fd: Insufficient options for proto=fd
[  526.818530][T25151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25151 comm=syz.3.6241
[  528.858141][T25199] lo: Caught tx_queue_len zero misconfig
[  528.863971][T25199] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  528.968525][T25203] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6256'.
[  529.115459][T25203] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6256'.
[  529.202319][T25203] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6256'.
[  529.851975][T25216] lo speed is unknown, defaulting to 1000
[  530.121658][T25222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6261'.
[  530.524081][T25205] lo speed is unknown, defaulting to 1000
[  530.859620][T25252] loop9: detected capacity change from 0 to 1024
[  530.866734][T25252] EXT4-fs: Ignoring removed oldalloc option
[  530.872775][T25252] ext2: Unknown parameter 'smackfsdef'
[  531.203215][T25257] netlink: 'syz.9.6271': attribute type 1 has an invalid length.
[  531.412210][T25265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25265 comm=syz.3.6274
[  531.487488][T25267] ip6erspan1: entered allmulticast mode
[  531.940328][T25276] lo speed is unknown, defaulting to 1000
[  532.806200][T25301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  532.822972][   T28] kauditd_printk_skb: 57 callbacks suppressed
[  532.822987][   T28] audit: type=1326 audit(1774269677.246:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  532.859747][   T28] audit: type=1326 audit(1774269677.246:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  532.893109][   T28] audit: type=1326 audit(1774269677.246:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  532.956934][   T28] audit: type=1326 audit(1774269677.246:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  532.984832][   T28] audit: type=1326 audit(1774269677.246:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  533.010811][   T28] audit: type=1326 audit(1774269677.246:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  533.034533][   T28] audit: type=1326 audit(1774269677.246:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  533.060038][   T28] audit: type=1326 audit(1774269677.246:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  533.093673][   T28] audit: type=1326 audit(1774269677.306:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  533.146694][   T28] audit: type=1326 audit(1774269677.306:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.2.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328f7dc799 code=0x7ffc0000
[  533.338280][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6291'.
[  533.965737][T25333] No such timeout policy "syz0"
[  534.389468][T25336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6294'.
[  534.532360][T25340] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6297'.
[  534.569730][T25340] bridge: RTM_NEWNEIGH bridge10 without NUD_PERMANENT
[  538.650356][T25415] syz.1.6318 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[  538.675364][T25415] CPU: 0 UID: 0 PID: 25415 Comm: syz.1.6318 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  538.675445][T25415] Tainted: [W]=WARN
[  538.675452][T25415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  538.675464][T25415] Call Trace:
[  538.675480][T25415]  <TASK>
[  538.675487][T25415]  __dump_stack+0x1d/0x30
[  538.675511][T25415]  dump_stack_lvl+0x95/0xd0
[  538.675530][T25415]  dump_stack+0x15/0x1b
[  538.675550][T25415]  dump_header+0x80/0x240
[  538.675571][T25415]  oom_kill_process+0x295/0x350
[  538.675671][T25415]  out_of_memory+0x97d/0xb80
[  538.675760][T25415]  try_charge_memcg+0x62e/0xa10
[  538.675870][T25415]  obj_cgroup_charge_pages+0x23/0xc0
[  538.675999][T25415]  __memcg_kmem_charge_page+0x9e/0x170
[  538.676050][T25415]  __alloc_frozen_pages_noprof+0x18a/0x360
[  538.676127][T25415]  alloc_pages_bulk_noprof+0x4aa/0x530
[  538.676157][T25415]  ? __kmalloc_noprof+0x3cf/0x4e0
[  538.676173][T25415]  ? alloc_pages_bulk_mempolicy_noprof+0x8da/0xea0
[  538.676276][T25415]  alloc_pages_bulk_mempolicy_noprof+0xc8a/0xea0
[  538.676402][T25415]  __vmalloc_node_range_noprof+0x87c/0x12b0
[  538.676490][T25415]  __kvmalloc_node_noprof+0x3d4/0x650
[  538.676511][T25415]  ? futex_hash_allocate+0x190/0x9d0
[  538.676533][T25415]  ? futex_hash_allocate+0x190/0x9d0
[  538.676556][T25415]  futex_hash_allocate+0x190/0x9d0
[  538.676628][T25415]  ? cap_task_prctl+0x13f/0x6e0
[  538.676651][T25415]  futex_hash_prctl+0xd8/0xf0
[  538.676674][T25415]  __se_sys_prctl+0xa3d/0x13f0
[  538.676751][T25415]  __x64_sys_prctl+0x67/0x80
[  538.676775][T25415]  x64_sys_call+0x2533/0x3020
[  538.676796][T25415]  do_syscall_64+0x12c/0x370
[  538.676844][T25415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.676867][T25415] RIP: 0033:0x7f267e59c799
[  538.676885][T25415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.676915][T25415] RSP: 002b:00007f267cfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  538.676932][T25415] RAX: ffffffffffffffda RBX: 00007f267e815fa0 RCX: 00007f267e59c799
[  538.676943][T25415] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  538.676953][T25415] RBP: 00007f267e632c99 R08: 0000000000000000 R09: 0000000000000000
[  538.677032][T25415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.677043][T25415] R13: 00007f267e816038 R14: 00007f267e815fa0 R15: 00007fff02d36128
[  538.677059][T25415]  </TASK>
[  538.677150][T25415] memory: usage 307200kB, limit 307200kB, failcnt 3441
[  538.986026][T25415] memory+swap: usage 306736kB, limit 9007199254740988kB, failcnt 0
[  538.993947][T25415] kmem: usage 238012kB, limit 9007199254740988kB, failcnt 0
[  539.040596][T25433] lo speed is unknown, defaulting to 1000
[  539.061325][T25415] Memory cgroup stats for /syz1:
[  539.061722][T25415] cache 14925824
[  539.095613][T25415] rss 483328
[  539.098863][T25415] shmem 14913536
[  539.102493][T25415] mapped_file 12288
[  539.199049][T25415] dirty 8192
[  539.202647][T25415] writeback 0
[  539.223919][T25415] workingset_refault_anon 5387
[  539.242772][T25415] workingset_refault_file 11594
[  539.247732][T25415] swap 53837824
[  539.251327][T25415] swapcached 58707968
[  539.265316][T25415] pgpgin 572277
[  539.268825][T25415] pgpgout 568261
[  539.272478][T25415] pgfault 571309
[  539.305343][T25415] pgmajfault 951
[  539.308914][T25415] inactive_anon 638976
[  539.312969][T25415] active_anon 15773696
[  539.329662][T25415] inactive_file 12288
[  539.356242][T25415] active_file 24576
[  539.360221][T25415] unevictable 0
[  539.364898][T25415] hierarchical_memory_limit 314572800
[  539.380601][T25415] hierarchical_memsw_limit 9223372036854771712
[  539.387481][T25415] total_cache 14925824
[  539.391682][T25415] total_rss 483328
[  539.396430][T25415] total_shmem 14913536
[  539.400659][T25415] total_mapped_file 12288
[  539.405197][T25415] total_dirty 8192
[  539.409881][T25415] total_writeback 0
[  539.421053][T25415] total_workingset_refault_anon 5387
[  539.435925][T25415] total_workingset_refault_file 11594
[  539.445400][T25415] total_swap 53837824
[  539.449449][T25415] total_swapcached 58707968
[  539.454014][T25415] total_pgpgin 572277
[  539.458332][T25415] total_pgpgout 568261
[  539.462510][T25415] total_pgfault 571309
[  539.629804][T25415] total_pgmajfault 951
[  539.654275][T25415] total_inactive_anon 638976
[  539.684204][T25415] total_active_anon 15773696
[  539.708713][T25415] total_inactive_file 12288
[  539.733946][T25415] total_active_file 24576
[  539.768690][T25415] total_unevictable 0
[  539.781956][T25415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1140,pid=6976,uid=0
[  539.797414][T25415] Memory cgroup out of memory: Killed process 6976 (syz.1.1140) total-vm:96080kB, anon-rss:1224kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000
[  539.962301][T25472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6331'.
[  540.147322][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6332'.
[  540.286950][T25471] bond8: option lacp_active: invalid value (5)
[  540.333970][T25471] bond8 (unregistering): Released all slaves
[  540.452599][T25484] loop9: detected capacity change from 0 to 1024
[  540.462547][T25484] EXT4-fs: Ignoring removed orlov option
[  540.589282][T25484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  541.027781][T25484] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.627171][T25505] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.6341'.
[  541.687419][T25505] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  542.595481][T25525] lo speed is unknown, defaulting to 1000
[  542.876663][T25537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.969590][T25537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.046804][T25548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  543.084189][T25548] team0: No ports can be present during mode change
[  543.132831][T25550] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6354'.
[  543.153860][T25550] bridge: RTM_NEWNEIGH bridge10 without NUD_PERMANENT
[  543.848052][T25571] netlink: 'syz.2.6362': attribute type 1 has an invalid length.
[  544.081933][T25571] 8021q: adding VLAN 0 to HW filter on device bond14
[  544.097309][T25571] bond13: (slave bond14): making interface the new active one
[  544.105963][T25571] bond13: (slave bond14): Enslaving as an active interface with an up link
[  544.122227][T25571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6362'.
[  544.159055][T25571] 8021q: adding VLAN 0 to HW filter on device bond13
[  544.173662][T25571] vlan0: entered promiscuous mode
[  544.179754][T25571] bond13: entered promiscuous mode
[  544.185012][T25571] bond14: entered promiscuous mode
[  545.010987][T25601] lo speed is unknown, defaulting to 1000
[  546.926653][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  546.926667][   T28] audit: type=1400 audit(1774269691.346:4207): avc:  denied  { create } for  pid=25617 comm="syz.8.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  547.495271][   T28] audit: type=1400 audit(1774269691.936:4208): avc:  denied  { ioctl } for  pid=25617 comm="syz.8.6372" path="socket:[134805]" dev="sockfs" ino=134805 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  547.578096][   T28] audit: type=1400 audit(1774269692.026:4209): avc:  denied  { listen } for  pid=25644 comm="syz.9.6377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  547.739245][T25617] delete_channel: no stack
[  547.828900][T25664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6392'.
[  548.557266][T25678] lo speed is unknown, defaulting to 1000
[  549.750220][T25689] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  549.908696][T25693] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6388'.
[  549.931671][T25689] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  550.850206][T25693] bond0 (unregistering): Released all slaves
[  553.829939][   T28] audit: type=1326 audit(1774269697.356:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  553.857955][   T28] audit: type=1326 audit(1774269697.356:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  554.563231][   T28] audit: type=1326 audit(1774269697.516:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  554.734492][   T28] audit: type=1326 audit(1774269697.516:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  555.810338][   T28] audit: type=1326 audit(1774269697.656:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  555.834867][   T28] audit: type=1326 audit(1774269697.656:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f267e59c502 code=0x7ffc0000
[  555.931716][   T28] audit: type=1326 audit(1774269697.656:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f267e59c597 code=0x7ffc0000
[  556.035245][   T28] audit: type=1326 audit(1774269697.656:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f267e559491 code=0x7ffc0000
[  556.137712][   T28] audit: type=1326 audit(1774269697.656:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f267e59d589 code=0x7ffc0000
[  556.244180][   T28] audit: type=1326 audit(1774269697.656:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.1.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f267e5594fb code=0x7ffc0000
[  556.486275][T25767] 9p: Bad value for 'rfdno'
[  556.585788][T25773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6411'.
[  557.649116][T25800] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6423'.
[  560.088391][T25830] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6432'.
[  560.110267][T25830] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6432'.
[  560.121715][T25830] SELinux:  policydb magic number 0x100 does not match expected magic number 0xf97cff8c
[  560.128911][   T28] kauditd_printk_skb: 41 callbacks suppressed
[  560.128939][   T28] audit: type=1400 audit(1774269704.566:4261): avc:  denied  { load_policy } for  pid=25825 comm="syz.9.6432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  560.132288][T25830] SELinux: failed to load policy
[  560.181452][T25842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6435'.
[  560.670061][T25835] syz.3.6434 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0
[  560.709558][T25835] CPU: 0 UID: 0 PID: 25835 Comm: syz.3.6434 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  560.709591][T25835] Tainted: [W]=WARN
[  560.709597][T25835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  560.709628][T25835] Call Trace:
[  560.709635][T25835]  <TASK>
[  560.709644][T25835]  __dump_stack+0x1d/0x30
[  560.709669][T25835]  dump_stack_lvl+0x95/0xd0
[  560.709691][T25835]  dump_stack+0x15/0x1b
[  560.709761][T25835]  dump_header+0x80/0x240
[  560.709782][T25835]  oom_kill_process+0x295/0x350
[  560.709803][T25835]  out_of_memory+0x97d/0xb80
[  560.709824][T25835]  try_charge_memcg+0x62e/0xa10
[  560.709908][T25835]  obj_cgroup_charge_pages+0x23/0xc0
[  560.709937][T25835]  __memcg_kmem_charge_page+0x9e/0x170
[  560.710040][T25835]  __alloc_frozen_pages_noprof+0x18a/0x360
[  560.710112][T25835]  alloc_pages_mpol+0xb3/0x260
[  560.710181][T25835]  alloc_pages_noprof+0x8f/0x130
[  560.710204][T25835]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  560.710246][T25835]  __kvmalloc_node_noprof+0x3d4/0x650
[  560.710269][T25835]  ? futex_hash_allocate+0x190/0x9d0
[  560.710293][T25835]  ? futex_hash_allocate+0x190/0x9d0
[  560.710382][T25835]  futex_hash_allocate+0x190/0x9d0
[  560.710407][T25835]  ? cap_task_prctl+0x13f/0x6e0
[  560.710430][T25835]  futex_hash_prctl+0xd8/0xf0
[  560.710522][T25835]  __se_sys_prctl+0xa3d/0x13f0
[  560.710548][T25835]  __x64_sys_prctl+0x67/0x80
[  560.710605][T25835]  x64_sys_call+0x2533/0x3020
[  560.710630][T25835]  do_syscall_64+0x12c/0x370
[  560.710701][T25835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.710722][T25835] RIP: 0033:0x7fd70befc799
[  560.710738][T25835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.710784][T25835] RSP: 002b:00007fd70a957028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  560.710803][T25835] RAX: ffffffffffffffda RBX: 00007fd70c175fa0 RCX: 00007fd70befc799
[  560.710829][T25835] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  560.710841][T25835] RBP: 00007fd70bf92c99 R08: 0000000000000000 R09: 0000000000000000
[  560.710897][T25835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  560.710909][T25835] R13: 00007fd70c176038 R14: 00007fd70c175fa0 R15: 00007ffee4dec788
[  560.710929][T25835]  </TASK>
[  560.712261][T25835] memory: usage 307040kB, limit 307200kB, failcnt 1409
[  560.953420][T25835] memory+swap: usage 129200kB, limit 9007199254740988kB, failcnt 0
[  560.962962][T25835] kmem: usage 33280kB, limit 9007199254740988kB, failcnt 0
[  560.970574][T25835] Memory cgroup stats for /syz3:
[  560.970801][T25835] cache 97234944
[  560.980221][T25835] rss 942080
[  560.983708][T25835] shmem 97222656
[  560.987927][T25835] mapped_file 8192
[  560.992128][T25835] dirty 8192
[  560.995415][T25835] writeback 0
[  560.998685][T25835] workingset_refault_anon 5235
[  561.004376][T25835] workingset_refault_file 2184
[  561.010349][T25835] swap 0
[  561.013319][T25835] swapcached 8220672
[  561.019525][T25835] pgpgin 563119
[  561.023117][T25835] pgpgout 539142
[  561.028592][T25835] pgfault 598382
[  561.032403][T25835] pgmajfault 796
[  561.037246][T25835] inactive_anon 0
[  561.041087][T25835] active_anon 98189312
[  561.047296][T25835] inactive_file 8192
[  561.051317][T25835] active_file 0
[  561.166810][T25835] unevictable 0
[  561.170331][T25835] hierarchical_memory_limit 314572800
[  561.177340][T25835] hierarchical_memsw_limit 9223372036854771712
[  561.183561][T25835] total_cache 97234944
[  561.189006][T25835] total_rss 942080
[  561.193220][T25835] total_shmem 97222656
[  561.199972][T25835] total_mapped_file 8192
[  561.204443][T25835] total_dirty 8192
[  561.208643][T25835] total_writeback 0
[  561.212844][T25835] total_workingset_refault_anon 5235
[  561.291811][T25835] total_workingset_refault_file 2184
[  561.309802][T25835] total_swap 0
[  561.320356][T25835] total_swapcached 8220672
[  561.340706][T25835] total_pgpgin 563119
[  561.361458][T25835] total_pgpgout 539142
[  561.392354][T25835] total_pgfault 598382
[  561.417827][T25835] total_pgmajfault 796
[  561.434461][T25835] total_inactive_anon 0
[  561.439410][T25835] total_active_anon 98189312
[  561.444064][T25835] total_inactive_file 8192
[  561.448599][T25835] total_active_file 0
[  561.466526][T25835] total_unevictable 0
[  561.481188][T25835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6434,pid=25834,uid=0
[  561.502024][T25835] Memory cgroup out of memory: Killed process 25835 (syz.3.6434) total-vm:96212kB, anon-rss:1416kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  565.831340][T25943] netlink: 'syz.8.6463': attribute type 1 has an invalid length.
[  565.930147][T25943] 8021q: adding VLAN 0 to HW filter on device bond20
[  565.966967][T25943] bond0: (slave bond20): making interface the new active one
[  566.005177][T25943] bond0: (slave bond20): Enslaving as an active interface with an up link
[  566.024223][T25953] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6463'.
[  566.059118][T25953] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.127552][T25943] vlan1: entered promiscuous mode
[  566.145943][T25943] bond0: entered promiscuous mode
[  566.161121][T25943] bond20: entered promiscuous mode
[  566.295933][   T28] audit: type=1400 audit(1774269710.736:4262): avc:  denied  { create } for  pid=25955 comm="syz.8.6466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  566.327882][   T28] audit: type=1400 audit(1774269710.776:4263): avc:  denied  { ioctl } for  pid=25955 comm="syz.8.6466" path="socket:[137362]" dev="sockfs" ino=137362 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  567.718964][T25975] ip6tnl2: entered promiscuous mode
[  567.841734][T25975] ip6tnl2: entered allmulticast mode
[  567.865463][T25979] netlink: 'syz.8.6474': attribute type 4 has an invalid length.
[  567.909183][T25977] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6473'.
[  567.924966][T25977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6473'.
[  568.457115][   T28] audit: type=1326 audit(1774269712.906:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.1.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  568.482520][   T28] audit: type=1326 audit(1774269712.906:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.1.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  568.509809][   T28] audit: type=1326 audit(1774269712.926:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.1.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  568.517287][T25986] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6477'.
[  568.534060][   T28] audit: type=1326 audit(1774269712.926:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.1.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  568.696727][   T28] audit: type=1326 audit(1774269712.926:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.1.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f267e59c799 code=0x7ffc0000
[  568.722700][   T28] audit: type=1326 audit(1774269712.926:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.1.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f267e59c502 code=0x7ffc0000
[  568.766968][   T28] audit: type=1326 audit(1774269712.926:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.1.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f267e55cfce code=0x7ffc0000
[  568.837640][   T28] audit: type=1326 audit(1774269712.926:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25983 comm="syz.1.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f267e59c5c7 code=0x7ffc0000
[  569.821268][T26005] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6484'.
[  569.939318][T26008] netlink: 'syz.9.6485': attribute type 10 has an invalid length.
[  569.950768][T26008] team0: Port device xfrm0 added
[  569.963159][T26008] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.6485'.
[  570.467094][T26012] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.6487'.
[  570.503547][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6488'.
[  570.520221][T26012] netlink: zone id is out of range
[  570.533085][T26014] netlink: 'syz.3.6488': attribute type 27 has an invalid length.
[  570.535785][T26012] netlink: zone id is out of range
[  570.552555][T26012] netlink: zone id is out of range
[  570.560984][T26012] netlink: zone id is out of range
[  570.568788][T26012] netlink: zone id is out of range
[  570.574578][T26012] netlink: zone id is out of range
[  570.592548][T26012] netlink: zone id is out of range
[  570.598095][T26012] netlink: zone id is out of range
[  570.603712][T26012] netlink: zone id is out of range
[  570.609432][T26012] netlink: zone id is out of range
[  570.672389][T26014] ipvlan2: left promiscuous mode
[  570.685188][T26014] ipvlan2: left allmulticast mode
[  570.690273][T26014] bond13: left allmulticast mode
[  570.700175][T26014] ip6gretap2: left allmulticast mode
[  570.760830][T26014] ip6erspan1: left allmulticast mode
[  570.771981][T26024] loop9: detected capacity change from 0 to 512
[  570.778857][T26024] ext4: Unknown parameter 'fsmagic'
[  570.947085][T26020] 8021q: adding VLAN 0 to HW filter on device bond0
[  570.974565][T26020] 8021q: adding VLAN 0 to HW filter on device team0
[  571.688041][T26030] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6493'.
[  571.791948][T26037] tipc: Enabled bearer <eth:vlan1>, priority 10
[  571.805253][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  571.805269][   T28] audit: type=1400 audit(1774269716.216:4302): avc:  denied  { ioctl } for  pid=26032 comm="syz.3.6494" path="socket:[136637]" dev="sockfs" ino=136637 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  571.879790][T26040] 9p: Bad value for 'rfdno'
[  571.913090][T26037] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=26037 comm=syz.2.6495
[  572.128105][T26047] netlink: 'syz.1.6499': attribute type 4 has an invalid length.
[  572.283661][T26030] loop9: detected capacity change from 0 to 512
[  572.369258][T26030] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  572.462650][T26030] EXT4-fs (loop9): 1 truncate cleaned up
[  572.550791][T26030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  572.631185][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6505'.
[  573.581628][T26078] netlink: 'syz.8.6503': attribute type 1 has an invalid length.
[  573.590087][T26078] netlink: 'syz.8.6503': attribute type 2 has an invalid length.
[  574.543987][T22792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.935071][T26104] netlink: 'syz.9.6515': attribute type 27 has an invalid length.
[  575.016642][T26104] veth1: left allmulticast mode
[  575.226738][   T28] audit: type=1400 audit(1774269719.676:4303): avc:  denied  { setcurrent } for  pid=26102 comm="syz.9.6515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  575.302392][T26108] 8021q: adding VLAN 0 to HW filter on device bond0
[  575.334689][T26108] 8021q: adding VLAN 0 to HW filter on device team0
[  575.375131][T26110] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6515'.
[  575.434399][T26113] lo speed is unknown, defaulting to 1000
[  577.983300][T26141] xt_hashlimit: size too large, truncated to 1048576
[  579.159182][T26153] ==================================================================
[  579.167295][T26153] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  579.175912][T26153] 
[  579.178238][T26153] write to 0xffff8881326cc5e8 of 8 bytes by task 26154 on cpu 0:
[  579.185950][T26153]  shmem_file_splice_read+0x470/0x600
[  579.191334][T26153]  splice_direct_to_actor+0x26e/0x670
[  579.196787][T26153]  do_splice_direct+0x119/0x1a0
[  579.201639][T26153]  do_sendfile+0x382/0x650
[  579.206055][T26153]  __x64_sys_sendfile64+0x105/0x150
[  579.211331][T26153]  x64_sys_call+0x2dc4/0x3020
[  579.216012][T26153]  do_syscall_64+0x12c/0x370
[  579.220601][T26153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.226489][T26153] 
[  579.228796][T26153] write to 0xffff8881326cc5e8 of 8 bytes by task 26153 on cpu 1:
[  579.236503][T26153]  shmem_file_splice_read+0x470/0x600
[  579.241878][T26153]  splice_direct_to_actor+0x26e/0x670
[  579.247235][T26153]  do_splice_direct+0x119/0x1a0
[  579.252079][T26153]  do_sendfile+0x382/0x650
[  579.256575][T26153]  __x64_sys_sendfile64+0x105/0x150
[  579.261879][T26153]  x64_sys_call+0x2dc4/0x3020
[  579.266563][T26153]  do_syscall_64+0x12c/0x370
[  579.271153][T26153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.277042][T26153] 
[  579.279355][T26153] value changed: 0x0000000000003244 -> 0x000000000000324b
[  579.286445][T26153] 
[  579.288760][T26153] Reported by Kernel Concurrency Sanitizer on:
[  579.294921][T26153] CPU: 1 UID: 0 PID: 26153 Comm: syz.2.6530 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  579.305862][T26153] Tainted: [W]=WARN
[  579.309654][T26153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  579.319787][T26153] ==================================================================