last executing test programs:

3m17.043292862s ago: executing program 2 (id=200):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x109800, 0x0) (async, rerun: 64)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async, rerun: 64)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32)
r3 = socket(0x10, 0x803, 0x0) (rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r4, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028005000900040000001400030000000000000000000000ff"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async, rerun: 64)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async, rerun: 64)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

3m17.042963772s ago: executing program 2 (id=201):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0)
r6 = syz_open_dev$ptys(0xc, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
fchdir(r10)
r11 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r13, &(0x7f0000004200)='t', 0x1)
sendfile(r13, r12, 0x0, 0x7fffffff)
ftruncate(r11, 0x2007ffb)
sendfile(r11, r11, 0x0, 0x1000000201005)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f00000000c0)={0x189, 0x14, &(0x7f0000000840)="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"})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x6, 0x0, 0xfc, 0x0, 0x6, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x800000000005, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

3m15.788471574s ago: executing program 2 (id=217):
io_uring_setup(0x3c93, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018105b93bf3dd651010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x4, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r2 = socket(0x40000000015, 0x5, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x0)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x10, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)

3m13.053025736s ago: executing program 2 (id=254):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$ITER_CREATE(0xb, 0x0, 0x0) (async)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async)
ftruncate(r0, 0xd) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = msgget$private(0x0, 0x480) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2001)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000000180)={0x8000, 0x1, 0x6, {0xffffff80, 0x9}, 0xf3, 0xee13}) (async)
write$tun(r4, &(0x7f0000002140)=ANY=[@ANYBLOB="0a0088a8aaaaaaaaaaaaaaaaaaaaaaaa86dd6738960c00001100fe8000000000000000000000000000aafc01ebffffffffffffff000000000000"], 0x3a) (async)
msgsnd(r3, &(0x7f0000000040)=ANY=[], 0x401, 0x800) (async)
msgctl$IPC_RMID(r3, 0x0) (async)
pipe2(&(0x7f0000001180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4000)
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}, {&(0x7f0000000040)="ca", 0x1}], 0x2, 0x0) (async)
read$char_usb(r8, &(0x7f00000004c0)=""/231, 0xe7) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0xb89de000) (async)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
read(r10, &(0x7f0000000040)=""/148, 0xffffff96)

3m12.9850772s ago: executing program 2 (id=256):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000100)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@uni_xlate}, {@fat=@tz_utc}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@fat=@nocase}, {@shortname_lower}, {@shortname_mixed}, {@fat=@errors_remount}, {@shortname_lower}], [{@smackfsdef={'smackfsdef', 0x3d, 'utf8=0'}}, {@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@euid_gt}, {@obj_role}, {@hash}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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")
r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0xa09e, [{0xd, 0x4, 0xf7}, {0xf, 0x3}]}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/86, 0x3f, 0x56, 0x0, 0x7, 0x10000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x4, 0x4, 0x3}, 0x50)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xd}, [@typed={0x4, 0xa}]}, 0x18}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x55af)

3m12.745146675s ago: executing program 2 (id=260):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) (async)

2m57.287263476s ago: executing program 32 (id=260):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) (async)

3.288908016s ago: executing program 1 (id=2551):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x5c, 0x4, 0x3, 0x0, 0x2, 0x2000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x8, 0x3, 0x3, 0x3, 0x8, 0x4, 0x8, 0x0, 0x81, 0x0, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x0, &(0x7f0000000040)})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x101}, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b95477511ba86ecaf919bc87db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'})
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r9, &(0x7f0000000080)=@other={'unlock', ' ', 'io'}, 0xa)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r11 = dup(r10)
sendmsg$inet(r11, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc)
sigaltstack(0x0, 0x0)

2.475679689s ago: executing program 1 (id=2565):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x2}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000840)="3a4547dd7400"/15, 0xf}], 0x1}}], 0x1, 0x400c800)

2.462872426s ago: executing program 3 (id=2566):
r0 = syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x79d, &(0x7f0000000880)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000f396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
socket(0x28, 0x5, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
copy_file_range(r0, &(0x7f0000000040)=0xb, r0, &(0x7f0000000300)=0x92b, 0x4, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffcdd}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xa8c0}, 0x2000a004)
r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
r6 = dup(r5)
fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '@@$)\xa3$\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'ext4\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bridge\x00'}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x100}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x2000c090}, 0x804)

2.398390902s ago: executing program 3 (id=2567):
socket$inet6(0xa, 0x2, 0x0)
close(0x3)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f8000000010201080000000000000000030000080800054000000009800003801400018008000100ac1414bb080002000a01010106000340000400002c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000010c0002800500010001000000060003400002000006000340000400000c000280050001003a0000000c0002800500010001000000480001800c000280050001002f0000002c000180140003000000000000000000000000000000000014000400fc0000000000000000000000000000010c00028005000100840000000a000b00512e39338b5a61560600074000030000ab023db9e94e30c03ae5ef"], 0xf8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4844)
openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
pipe(&(0x7f0000000200))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0x5, 0x2, 0x3, 0x80}, {0x4, 0x2, 0x0, 0x7ff}, {0xfffd, 0x40, 0xb, 0x7}, {0x10, 0x0, 0x3}, {0x993f, 0xe1, 0x80, 0x4}, {0x4, 0x3, 0x1, 0x2}]})
socket(0x1e, 0x80000, 0x0)
memfd_create(0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x16bb17640a85c205, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)

2.330851116s ago: executing program 0 (id=2569):
socket$inet6(0xa, 0x2, 0x0)
close(0x3)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4844)
openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
pipe(&(0x7f0000000200))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0x5, 0x2, 0x3, 0x80}, {0x4, 0x2, 0x0, 0x7ff}, {0xfffd, 0x40, 0xb, 0x7}, {0x10, 0x0, 0x3}, {0x993f, 0xe1, 0x80, 0x4}, {0x4, 0x3, 0x1, 0x2}]})
socket(0x1e, 0x80000, 0x0)
memfd_create(0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x16bb17640a85c205, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)

1.852230246s ago: executing program 4 (id=2574):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x5c, 0x4, 0x3, 0x0, 0x2, 0x2000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x8, 0x3, 0x3, 0x3, 0x8, 0x4, 0x8, 0x0, 0x81, 0x0, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x0, &(0x7f0000000040)})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x101}, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b95477511ba86ecaf919bc87db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'})
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r9, &(0x7f0000000080)=@other={'unlock', ' ', 'io'}, 0xa)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r11 = dup(r10)
sendmsg$inet(r11, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc)
sigaltstack(0x0, 0x0)

1.760785685s ago: executing program 5 (id=2575):
r0 = syz_io_uring_setup(0x10b, &(0x7f0000000440)={0x0, 0x46a9, 0x400, 0x3, 0x108}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0)
r6 = socket$inet6(0x10, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r6, 0x0, 0x0, 0x0, 0x40010020, 0x69bb8c7967f8c16})
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r6, 0x33, {0x27fffffffffffff, 0x800000008}, 0x54}, 0x1)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=<r9=>0x0, &(0x7f0000000200)=<r10=>0x0)
connect$rxrpc(r7, 0x0, 0x0)
r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = syz_pidfd_open(r11, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
ioctl$FS_IOC_GETVERSION(r12, 0xc040ff0b, &(0x7f0000000180))
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x3e}, 0x28)
r13 = getpid()
sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x7)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r13, 0x9, &(0x7f0000000480)=""/4096)
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.629349065s ago: executing program 5 (id=2576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r7, &(0x7f0000001180)=[{&(0x7f00000011c0)="273eebfef2f171d6b26b0e923301b61c42cb1dff56bac3c6a0b7b95c3475c53b6c4777f5e4d8231441a62b4a1d9800"/56, 0x38}], 0x1)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r8, 0x1, 0x70bd2b, 0x25cfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfe}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan4\x00', <r11=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000f00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4001)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000025c0)=@ethtool_gstrings={0x1b, 0x8}})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040004)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0})
r14 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r15 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xfffffffffff80000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

1.621270983s ago: executing program 1 (id=2577):
close(0x3)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000400)={0xa, 0x1, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x30}, 0x40000)
pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0x5, 0x2, 0x3, 0x80}, {0x4, 0x2, 0x0, 0x7ff}, {0xfffd, 0x40, 0xb, 0x7}, {0x10, 0x0, 0x3}, {0x993f, 0xe1, 0x80, 0x4}, {0x4, 0x3, 0x1, 0x2}]})
memfd_create(0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x16bb17640a85c205, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30)

1.545539036s ago: executing program 3 (id=2578):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000400)={0xa, 0x1, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x30}, 0x40000)
pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0x5, 0x2, 0x3, 0x80}, {0x4, 0x2, 0x0, 0x7ff}, {0xfffd, 0x40, 0xb, 0x7}, {0x10, 0x0, 0x3}, {0x993f, 0xe1, 0x80, 0x4}, {0x4, 0x3, 0x1, 0x2}]})
memfd_create(0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x16bb17640a85c205, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30)

1.473178149s ago: executing program 5 (id=2579):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)

1.472745899s ago: executing program 5 (id=2580):
write$tun(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x800, 0x0, 0x4, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r1 = syz_open_pts(r0, 0x141601)
fcntl$setstatus(r1, 0x4, 0x182400)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000008c0)={0x7fff, 0x2, 0x2, 0x3, 0x8, 0x0, [{0xffffffffffffffff, 0xa, 0x9, '\x00', 0x500}, {0x7, 0x2, 0x0, '\x00', 0x802}, {0x2, 0x0, 0xa}, {0x4, 0x5, 0x2, '\x00', 0xd02}, {0x800, 0x1, 0x5, '\x00', 0x13}, {0x0, 0x2, 0x8, '\x00', 0x1400}, {0x80000000, 0x444, 0x0, '\x00', 0x2100}, {0x6, 0x4, 0x512f, '\x00', 0x2209}]})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r5=>0x0})
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000540)={0x1, 0xc6, "e5a17df03c3f519b206cad2f0b51ed6698700b0a738caa6709a4814d6b0def79c09f2a99b4e6571c32d0fe985a9f2c63740375237998a38fafcb626c0d79744093f683371c70e268a87c60fa03b63114485604dcfa7e9a6d338cd7f72aba9705d16a3824d395ffd2eff1737c34a5dab4b7ca668c0fa1ed8023e9eac810f57938b44fe613dbf5b408e7dd3a28da251c91ee0c8aa5633a197e9f6e4193a1d04eff50c5e8da9bcd5ef4e553208940cd605f31341a723c2208c8d62cb2ac02fab96a4ac26d0af13a"})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @void}, 0x10)
io_setup(0x3ff, &(0x7f0000000500)=<r6=>0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r7 = syz_io_uring_setup(0x61ac, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(r7, 0x92, 0x2, 0x9, 0x0, 0x0)
r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/address_bits', 0x2a900, 0x9)
io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}])
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001002562bbb5d7000f8dbdf250000000092edff4e2f86ffbaef7ed364cc2521634f1b00bf9e6bec80c41a520193ff1cc5f900"/64, @ANYRES32=0x0, @ANYBLOB="8144000009060000300012800b000100697036746e6c000020000280140002002001000000000000000000000000000005000900040000000800040001010000"], 0x58}}, 0x40014)
ioctl$BLKPG(r11, 0x1269, &(0x7f0000000040)={0x2, 0x0, 0x98, &(0x7f0000000100)={0x3, 0x3}})
syz_emit_ethernet(0x10b4, &(0x7f0000001800)=ANY=[], 0x0)

1.461072756s ago: executing program 0 (id=2581):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff8001, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffff55)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0)

1.077370309s ago: executing program 0 (id=2582):
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x200000000008, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000001000)=[{{&(0x7f0000000680)=@x25={0x9, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000840)=""/225, 0xe1}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000000940)=""/148, 0x94}, {&(0x7f0000000a00)=""/137, 0x89}, {&(0x7f0000000200)=""/34, 0x22}], 0x9, &(0x7f0000000b80)=""/136, 0x88}, 0xfffffff9}, {{&(0x7f0000000c40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/161, 0xa1}, {&(0x7f0000000280)}, {&(0x7f0000000d80)=""/127, 0x7f}, {&(0x7f0000000e00)=""/180, 0xb4}, {&(0x7f0000000ec0)=""/153, 0x99}], 0x5, &(0x7f0000000300)=""/30, 0x1e}, 0x3}], 0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$inet(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d3970323030302c0063d8af718bcf415fdbe7738459b2505a970a797ffb91c512eea569dd7c831a6113a6ee0bd49b784390248925bbb2849b3b2aab64ac5b417724266ff8ad412a9df8f076f9b986f083627c14bdb8bedc399d98e8a4d631a1655c48e53cd217be340dec484c676f1c7f4ed45a7591befb0c9189b91b1a95d81ca5a99287e59ccb6e1ac4894b79da8496352f77577f0cd8816d032e896ce1880bbc9004f268fc2749bfb9cf3245289e82db0fc7b1b8703894f140"])
write$P9_RVERSION(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRES16, @ANYBLOB="816e259786e72f1064a3eeeb6b0309db1f8ab1590ea2c50da55e685f608e797c82b1a412728c0c9b245bab087acb3ff47e8a46bcb7c40345007e806c9b44a0a992a1724cf09378c77937eec5d4b06dd7c838e11365bc63a4806b88f1"], 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12)
socket$nl_route(0x10, 0x3, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)

1.059059894s ago: executing program 5 (id=2583):
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2, 0x31c}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff})
io_uring_enter(r1, 0x7a91, 0x0, 0x0, 0x0, 0x18)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000580)={&(0x7f0000002000)={[{0x0}, {0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x8}, 0x1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

985.401217ms ago: executing program 4 (id=2584):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

942.455117ms ago: executing program 4 (id=2585):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x20005, 0x64)

941.491377ms ago: executing program 5 (id=2586):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4059, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x200, 0x0, 0x200b}, 0x0, 0x7, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b00000006000000050020000200"], 0x78)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCGICOUNT(r4, 0x5409, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000a3c000000030a0fdb00000000000000000a00000508000b40000000030900010073797a310000000014000480080002408db193ab85efd77413f42a40bb08000140000011000100000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="4fe00e097533cdeff81ad5bcc600841f", 0x10}, {&(0x7f0000000000)="a274b2982d84f52a6fb443b2cf15a12e31ea1c07000000407056b9", 0x1b}], 0x2, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x18, 0x890}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, 0x0, 0x0)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
socket$inet_udplite(0x2, 0x2, 0x88)

928.799784ms ago: executing program 4 (id=2587):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@abort}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x100)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = eventfd2(0x8, 0x0)
write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r2, &(0x7f0000000000)=""/57, 0x39)
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@abort}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x100) (async)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
eventfd2(0x8, 0x0) (async)
write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) (async)
read(r2, &(0x7f0000000000)=""/57, 0x39) (async)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) (async)

793.112572ms ago: executing program 4 (id=2588):
set_mempolicy(0x4, &(0x7f0000000040)=0xfff, 0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=<r3=>r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="029000000080040008000a00", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsv0}]}, 0x6, 0x61f, &(0x7f0000000a80)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x33b081, 0x50)
getdents(r6, &(0x7f0000000100)=""/114, 0x72)
rmdir(&(0x7f0000000000)='./file0\x00')
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a3000000000030a01020000000000000000010000000bc80a7eb257cb52000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a0100000000", @ANYRES16=r3, @ANYRES32=r2], 0x7904}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000801)

743.911291ms ago: executing program 1 (id=2589):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000020000100000000000000000102000000020004020000000008000400fbffffff08000db691000000"], 0x2c}}, 0x8)
socket$netlink(0x10, 0x3, 0x0)

675.543986ms ago: executing program 4 (id=2590):
socket$inet6(0xa, 0x2, 0x0)
close(0x3)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f8000000010201080000000000000000030000080800054000000009800003801400018008000100ac1414bb080002000a01010106000340000400002c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000010c0002800500010001000000060003400002000006000340000400000c000280050001003a0000000c0002800500010001000000480001800c000280050001002f0000002c000180140003000000000000000000000000000000000014000400fc0000000000000000000000000000010c00028005000100840000000a000b00512e39338b5a61560600074000030000ab023db9e94e30c03ae5ef"], 0xf8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4844)
openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
pipe(&(0x7f0000000200))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0x5, 0x2, 0x3, 0x80}, {0x4, 0x2, 0x0, 0x7ff}, {0xfffd, 0x40, 0xb, 0x7}, {0x10, 0x0, 0x3}, {0x993f, 0xe1, 0x80, 0x4}, {0x4, 0x3, 0x1, 0x2}]})
socket(0x1e, 0x80000, 0x0)
memfd_create(0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x16bb17640a85c205, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)

674.686996ms ago: executing program 1 (id=2591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x123, 0x0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='B'], &(0x7f0000000000), 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0x5, 0x4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000, 0xa28}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

656.945621ms ago: executing program 3 (id=2592):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r0, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x12c, r0, 0xc0ac6600810b0d14, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8041}, 0x81)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x3, 0x800000, {0x0, 0x0, 0xffff, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0)
capget(&(0x7f0000000580)={0x20071026, 0xffffffffffffffff}, &(0x7f00000005c0)={0xc00, 0x9, 0x401, 0x0, 0x7, 0xc})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000791230000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000002000000000000000000000049b4f1b2e19bc365aa850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000480))
socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0)

573.511172ms ago: executing program 3 (id=2593):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@jqfmt_vfsold}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r4 = dup(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18)
prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18)
socket$pppl2tp(0x18, 0x1, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
unshare(0x22020600)
r5 = getpgid(0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
r8 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r7})
io_uring_enter(r8, 0x44fd, 0x3, 0x1, 0x0, 0x0)
r11 = syz_pidfd_open(r5, 0x0)
pidfd_send_signal(r11, 0x11, 0x0, 0x4)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xff}, 0x9805, 0x3, 0x7ff, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9)
shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil)
socket$packet(0x11, 0x3, 0x300)

500.105705ms ago: executing program 3 (id=2594):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x5c, 0x4, 0x3, 0x0, 0x2, 0x2000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x8, 0x3, 0x3, 0x3, 0x8, 0x4, 0x8, 0x0, 0x81, 0x0, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x0, &(0x7f0000000040)})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000bfa20000000000000702000000000000b703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x101}, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b95477511ba86ecaf919bc87db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'})
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r9, &(0x7f0000000080)=@other={'unlock', ' ', 'io'}, 0xa)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r11 = dup(r10)
sendmsg$inet(r11, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc)
sigaltstack(0x0, 0x0)

498.924365ms ago: executing program 1 (id=2595):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700001000abd7000f7dbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800500090007"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x4, 0x4, 0x0, 0x1], 0x0, 0x1}}}}, {{@ip={@remote, @multicast1, 0xffffffff, 0xffffff00, 'pimreg\x00', 'vlan0\x00', {}, {0xff}, 0x5c, 0x1, 0x4}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x2, 0x2, 0x3ff, 0x7, 0x0, 0x800]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x18, 0x0, &(0x7f0000000040)=0x2)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x46, &(0x7f0000000040)={0x0, 0x0}, 0x10)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = dup(r8)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa9630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
recvmmsg$unix(r11, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)

185.022723ms ago: executing program 0 (id=2596):
r0 = socket(0xa, 0x5, 0x0)
r1 = dup(r0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) (async)
recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0) (async)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x8, 0x9}}], 0x18}, 0x8050)
r3 = openat(0xffffffffffffff9c, 0x0, 0xa0c42, 0x100) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$packet(0x11, 0x2, 0x300) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) (async)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r5 = timerfd_create(0x8, 0x0)
read(r5, &(0x7f0000000380)=""/189, 0x8) (async)
timerfd_settime(r5, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) (async)
socket(0x10, 0x3, 0x0) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_clone(0xb00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3c}, 0x0, &(0x7f0000000040)={0x3fc, 0x2, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x80000003, 0x9cca}, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r8, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000))
syz_clone(0x65140000, 0x0, 0x0, 0x0, 0x0, 0x0)

184.574503ms ago: executing program 0 (id=2597):
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2, 0x31c}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff})
io_uring_enter(r1, 0x7a91, 0x0, 0x0, 0x0, 0x18)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000580)={&(0x7f0000002000)={[{0x0}, {0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x8}, 0x1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

0s ago: executing program 0 (id=2598):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000100)={[{@nodioread_nolock}, {@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x8)
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r0, 0x0, 0x0, 0x2f)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

dv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.360649][ T5162] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.367751][ T5162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.393754][   T28] audit: type=1400 audit(2000000001.380:1101): avc:  denied  { write } for  pid=5199 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   77.413309][ T5162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.423885][   T28] audit: type=1400 audit(2000000001.380:1102): avc:  denied  { cmd } for  pid=5199 comm="syz.4.478" path="socket:[9090]" dev="sockfs" ino=9090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   77.464506][ T5162] hsr_slave_0: entered promiscuous mode
[   77.472397][ T5162] hsr_slave_1: entered promiscuous mode
[   77.480333][ T5162] debugfs: 'hsr0' already exists in 'hsr'
[   77.486337][ T5162] Cannot create hsr debugfs directory
[   77.492213][ T5204] SELinux: failure in selinux_parse_skb(), unable to parse packet
[   77.607832][ T5162] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   77.618911][ T5162] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   77.628251][ T5162] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   77.637324][ T5162] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   77.656111][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.663375][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.670764][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.677958][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.715587][ T5162] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.729225][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.737378][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.752551][ T5162] 8021q: adding VLAN 0 to HW filter on device team0
[   77.764761][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.771912][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.783374][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.790544][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.869545][   T28] audit: type=1400 audit(2000000001.880:1103): avc:  denied  { write } for  pid=5221 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   77.894081][ T5222] netlink: 'syz.3.482': attribute type 13 has an invalid length.
[   77.926472][   T28] audit: type=1400 audit(2000000001.930:1104): avc:  denied  { setopt } for  pid=5224 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   77.992618][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.999888][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.027794][ T5222] bond_slave_0: left promiscuous mode
[   78.033764][ T5222] bond_slave_1: left promiscuous mode
[   78.091956][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.105445][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.193924][ T5247] xt_hashlimit: size too large, truncated to 1048576
[   78.350294][ T5110] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.468653][ T5110] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.523498][ T5110] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.532539][ T5110] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.564750][ T5162] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.676154][ T5268] mmap: syz.0.489 (5268) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   78.739967][ T5272] lo speed is unknown, defaulting to 1000
[   78.745940][ T5272] lo speed is unknown, defaulting to 1000
[   78.752137][ T5272] lo speed is unknown, defaulting to 1000
[   78.758720][ T5272] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.766797][ T5272] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   78.781851][ T5272] lo speed is unknown, defaulting to 1000
[   78.788424][ T5272] lo speed is unknown, defaulting to 1000
[   78.795039][ T5272] lo speed is unknown, defaulting to 1000
[   78.801480][ T5272] lo speed is unknown, defaulting to 1000
[   78.808021][ T5272] lo speed is unknown, defaulting to 1000
[   78.814765][ T5272] lo speed is unknown, defaulting to 1000
[   78.840007][ T5272] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[   78.887391][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'.
[   78.990938][   T28] audit: type=1400 audit(2000000002.850:1105): avc:  denied  { bind } for  pid=5261 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   79.227644][ T5281] lo speed is unknown, defaulting to 1000
[   79.303216][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'.
[   79.448781][ T5162] veth0_vlan: entered promiscuous mode
[   79.460618][ T5162] veth1_vlan: entered promiscuous mode
[   79.528096][ T5162] veth0_macvtap: entered promiscuous mode
[   79.549635][ T5162] veth1_macvtap: entered promiscuous mode
[   79.578042][ T5162] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.164208][ T5162] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.173033][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'.
[   80.195187][ T5112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.215254][ T5112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.282962][ T5112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.342134][ T5112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.388993][   T28] audit: type=1400 audit(2000000004.400:1106): avc:  denied  { mounton } for  pid=5162 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   80.459550][ T5328] loop5: detected capacity change from 0 to 512
[   80.510285][ T5327] cgroup: fork rejected by pids controller in /syz3
[   80.543633][ T5328] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   80.618090][ T5556] xt_TCPMSS: Only works on TCP SYN packets
[   80.680692][ T5746] futex_wake_op: syz.5.504 tries to shift op by -1; fix this program
[   80.700778][   T28] audit: type=1326 audit(2000000004.710:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[   80.902353][   T28] audit: type=1326 audit(2000000004.790:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[   80.988685][   T28] audit: type=1326 audit(2000000004.790:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[   81.012470][   T28] audit: type=1326 audit(2000000004.790:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[   81.083459][ T9140] loop5: detected capacity change from 0 to 512
[   81.189596][ T9140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.204050][ T9140] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.235972][ T5162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.443515][T10796] netlink: 84 bytes leftover after parsing attributes in process `syz.5.507'.
[   81.471780][T10798] netlink: 60 bytes leftover after parsing attributes in process `syz.4.512'.
[   81.544955][T10801] loop5: detected capacity change from 0 to 512
[   81.568423][T10801] EXT4-fs: Ignoring removed bh option
[   81.601938][T10801] EXT4-fs: inline encryption not supported
[   81.608641][T10801] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   81.611773][T10798] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   81.633915][T10798] bridge0: entered allmulticast mode
[   81.647182][T10801] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   81.782919][T10801] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.507: bg 0: block 248: padding at end of block bitmap is not set
[   81.797409][T10801] loop5: lost filesystem error report for type 5 error -117
[   81.797728][T10801] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.507: Failed to acquire dquot type 1
[   81.816272][    C1] EXT4-fs (loop5): error count since last fsck: 1
[   81.816294][    C1] EXT4-fs (loop5): last error at time 2000000005: ext4_validate_block_bitmap:441
[   81.832121][T10801] loop5: lost filesystem error report for type 5 error -117
[   81.832604][T10801] EXT4-fs (loop5): 1 truncate cleaned up
[   81.856294][T10801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   81.911761][T10815] futex_wake_op: syz.0.516 tries to shift op by -1; fix this program
[   82.124939][ T5162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   82.479182][   T28] kauditd_printk_skb: 66 callbacks suppressed
[   82.479200][   T28] audit: type=1326 audit(2000000006.480:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   82.515745][   T28] audit: type=1326 audit(2000000006.490:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effde76cfce code=0x7ffc0000
[   82.545540][   T28] audit: type=1326 audit(2000000006.490:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effde76cfce code=0x7ffc0000
[   82.572491][   T28] audit: type=1326 audit(2000000006.490:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effde76cfce code=0x7ffc0000
[   82.598424][   T28] audit: type=1326 audit(2000000006.490:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   82.622473][   T28] audit: type=1400 audit(2000000006.490:1180): avc:  denied  { read } for  pid=10825 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   82.647598][T10824] loop5: detected capacity change from 0 to 512
[   82.658454][T10824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.687372][T10824] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.756618][ T5162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.860534][   T28] audit: type=1400 audit(2000000006.870:1181): avc:  denied  { name_bind } for  pid=10844 comm="syz.4.526" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   83.135961][T10859] futex_wake_op: syz.3.529 tries to shift op by -1; fix this program
[   83.378076][   T28] audit: type=1326 audit(2000000007.390:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10864 comm="syz.3.531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[   83.987742][   T28] audit: type=1400 audit(2000000007.990:1183): avc:  denied  { read } for  pid=10882 comm="syz.1.535" path="socket:[10545]" dev="sockfs" ino=10545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   84.013364][T10884] 9p: Bad value for 'rfdno'
[   84.030162][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'.
[   84.078805][   T28] audit: type=1400 audit(2000000008.090:1184): avc:  denied  { read } for  pid=10887 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   84.457467][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'.
[   84.595224][T10925] tipc: Started in network mode
[   84.603551][T10925] tipc: Node identity , cluster identity 4711
[   84.650127][T10913] 9p: Bad value for 'rfdno'
[   84.914437][T10935] FAULT_INJECTION: forcing a failure.
[   84.914437][T10935] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   84.958356][T10935] CPU: 0 UID: 0 PID: 10935 Comm: syz.5.551 Not tainted syzkaller #0 PREEMPT(full) 
[   84.958385][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   84.958399][T10935] Call Trace:
[   84.958425][T10935]  <TASK>
[   84.958433][T10935]  __dump_stack+0x1d/0x30
[   84.958485][T10935]  dump_stack_lvl+0x95/0xd0
[   84.958511][T10935]  dump_stack+0x15/0x1b
[   84.958537][T10935]  should_fail_ex+0x263/0x280
[   84.958559][T10935]  should_fail+0xb/0x20
[   84.958657][T10935]  should_fail_usercopy+0x1a/0x20
[   84.958754][T10935]  _copy_to_user+0x20/0xa0
[   84.958788][T10935]  simple_read_from_buffer+0xb5/0x130
[   84.958816][T10935]  proc_fail_nth_read+0x10e/0x150
[   84.958852][T10935]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   84.958958][T10935]  vfs_read+0x1ab/0x7f0
[   84.958994][T10935]  ? __rcu_read_unlock+0x4e/0x70
[   84.959014][T10935]  ? __fget_files+0x184/0x1c0
[   84.959037][T10935]  ? mutex_lock+0x57/0x90
[   84.959065][T10935]  ksys_read+0xdc/0x1a0
[   84.959158][T10935]  __x64_sys_read+0x40/0x50
[   84.959265][T10935]  x64_sys_call+0x2886/0x3020
[   84.959294][T10935]  do_syscall_64+0x12c/0x370
[   84.959319][T10935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.959341][T10935] RIP: 0033:0x7f06bf69cfce
[   84.959408][T10935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   84.959431][T10935] RSP: 002b:00007f06be136fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   84.959455][T10935] RAX: ffffffffffffffda RBX: 00007f06be1376c0 RCX: 00007f06bf69cfce
[   84.959472][T10935] RDX: 000000000000000f RSI: 00007f06be1370a0 RDI: 0000000000000004
[   84.959488][T10935] RBP: 00007f06be137090 R08: 0000000000000000 R09: 0000000000000000
[   84.959503][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.959516][T10935] R13: 00007f06bf956038 R14: 00007f06bf955fa0 R15: 00007ffd1a84c438
[   84.959608][T10935]  </TASK>
[   85.645533][T10955] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   85.893792][T10971] xt_hashlimit: size too large, truncated to 1048576
[   85.996515][T10976] netlink: 'syz.3.564': attribute type 2 has an invalid length.
[   86.387606][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[   86.983870][T11020] lo speed is unknown, defaulting to 1000
[   87.159285][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.581'.
[   88.318127][   T28] kauditd_printk_skb: 23 callbacks suppressed
[   88.318143][   T28] audit: type=1326 audit(2000000012.330:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.3.587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[   88.622981][T11062] netlink: 'syz.4.589': attribute type 10 has an invalid length.
[   88.644450][T11062] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   88.683534][T11062] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.724578][T11062] bond_slave_0: entered promiscuous mode
[   88.730310][T11062] bond_slave_1: entered promiscuous mode
[   88.736125][T11062] syz_tun: entered promiscuous mode
[   88.762714][T11062] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.779556][T11062] bond1: (slave macvlan2): speed changed to 0 on port 1
[   88.799957][T11062] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   89.155895][   T28] audit: type=1400 audit(2000000013.160:1209): avc:  denied  { watch_reads } for  pid=11076 comm="syz.4.595" path="/153" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   89.230536][T11085] FAULT_INJECTION: forcing a failure.
[   89.230536][T11085] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   89.250177][T11085] CPU: 0 UID: 0 PID: 11085 Comm: syz.5.598 Not tainted syzkaller #0 PREEMPT(full) 
[   89.250215][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   89.250230][T11085] Call Trace:
[   89.250237][T11085]  <TASK>
[   89.250298][T11085]  __dump_stack+0x1d/0x30
[   89.250332][T11085]  dump_stack_lvl+0x95/0xd0
[   89.250363][T11085]  dump_stack+0x15/0x1b
[   89.250392][T11085]  should_fail_ex+0x263/0x280
[   89.250420][T11085]  should_fail_alloc_page+0xf2/0x100
[   89.250484][T11085]  __alloc_frozen_pages_noprof+0x108/0x360
[   89.250550][T11085]  alloc_pages_mpol+0xb3/0x260
[   89.250606][T11085]  ? css_rstat_updated+0xbb/0x280
[   89.250631][T11085]  vma_alloc_folio_noprof+0x1a9/0x300
[   89.250713][T11085]  handle_mm_fault+0x111f/0x3020
[   89.250762][T11085]  ? vma_start_read+0x1c7/0x2c0
[   89.250798][T11085]  do_user_addr_fault+0x62f/0x1050
[   89.250849][T11085]  ? ksys_mmap_pgoff+0xc1/0x310
[   89.250933][T11085]  ? fpregs_assert_state_consistent+0xb3/0xe0
[   89.250976][T11085]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[   89.251059][T11085]  ? trace_page_fault_user+0x1f/0xe0
[   89.251092][T11085]  exc_page_fault+0x62/0xa0
[   89.251189][T11085]  asm_exc_page_fault+0x26/0x30
[   89.251213][T11085] RIP: 0033:0x7f06bf593b18
[   89.251231][T11085] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[   89.251252][T11085] RSP: 002b:00007f06be136470 EFLAGS: 00010202
[   89.251311][T11085] RAX: 0000000000014000 RBX: 00007f06be136530 RCX: 0000000000000059
[   89.251328][T11085] RDX: 00000000000317f6 RSI: 00000000000037f7 RDI: 00007f06be1365d0
[   89.251342][T11085] RBP: 000000000000005a R08: 00007f06b5d17000 R09: 0000000000000073
[   89.251355][T11085] R10: 0000200000000582 R11: 0000000000000555 R12: 0000000000003001
[   89.251369][T11085] R13: 00007f06bf792320 R14: 000000000000001b R15: 00007f06be1365d0
[   89.251475][T11085]  </TASK>
[   89.251499][T11085] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   89.318724][T11083] futex_wake_op: syz.3.597 tries to shift op by -1; fix this program
[   89.324826][T11085] loop5: detected capacity change from 0 to 164
[   89.478464][T11085] rock: directory entry would overflow storage
[   89.484699][T11085] rock: sig=0x5252, size=5, remaining=3
[   89.503126][   T28] audit: type=1400 audit(2000000013.510:1210): avc:  denied  { mount } for  pid=11084 comm="syz.5.598" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   89.849884][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'.
[   89.874518][   T28] audit: type=1326 audit(2000000013.880:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[   90.115696][T11119] futex_wake_op: syz.4.611 tries to shift op by -1; fix this program
[   90.340497][   T28] audit: type=1400 audit(2000000014.350:1212): avc:  denied  { map } for  pid=11132 comm="syz.1.618" path="/133" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   90.548360][   T28] audit: type=1400 audit(2000000014.560:1213): avc:  denied  { append } for  pid=11135 comm="syz.5.619" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   90.560630][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.597440][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.600087][   T28] audit: type=1400 audit(2000000014.570:1214): avc:  denied  { ioctl } for  pid=11135 comm="syz.5.619" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   90.664536][   T28] audit: type=1400 audit(2000000014.630:1215): avc:  denied  { read } for  pid=11135 comm="syz.5.619" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   90.726492][   T28] audit: type=1400 audit(2000000014.690:1216): avc:  denied  { getopt } for  pid=11135 comm="syz.5.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   90.776424][   T28] audit: type=1400 audit(2000000014.700:1217): avc:  denied  { write } for  pid=11135 comm="syz.5.619" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   90.965061][T11147] futex_wake_op: syz.3.624 tries to shift op by -1; fix this program
[   91.173519][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.627'.
[   91.212439][T11156] geneve2: entered promiscuous mode
[   91.477767][T11178] futex_wake_op: syz.3.637 tries to shift op by -1; fix this program
[   91.850066][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'.
[   91.925753][T11203] netlink: 132 bytes leftover after parsing attributes in process `syz.5.647'.
[   91.950278][T11207] xt_hashlimit: size too large, truncated to 1048576
[   92.050496][T11211] futex_wake_op: syz.3.650 tries to shift op by -1; fix this program
[   92.275264][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'.
[   92.353409][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'.
[   92.426555][T11231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'.
[   92.539972][T11242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.658'.
[   92.793534][T11264] futex_wake_op: syz.3.666 tries to shift op by -1; fix this program
[   92.806756][T11266] xt_hashlimit: size too large, truncated to 1048576
[   92.979948][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'.
[   93.054130][T11278] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   93.106522][ T5244] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   93.346930][ T5112] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   93.356606][ T5244] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   93.455998][T11298] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.591780][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'.
[   93.825684][T11329] futex_wake_op: syz.5.685 tries to shift op by -1; fix this program
[   93.959901][   T28] kauditd_printk_skb: 93 callbacks suppressed
[   93.959919][   T28] audit: type=1326 audit(2000000017.970:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.038633][   T28] audit: type=1326 audit(2000000018.010:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.054966][T11336] loop5: detected capacity change from 0 to 128
[   94.100313][   T28] audit: type=1326 audit(2000000018.010:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.139128][   T28] audit: type=1326 audit(2000000018.010:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.176300][   T28] audit: type=1326 audit(2000000018.010:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.253172][   T28] audit: type=1326 audit(2000000018.010:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.315778][   T28] audit: type=1326 audit(2000000018.010:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.370767][   T28] audit: type=1326 audit(2000000018.010:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.419734][ T5115] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   94.432191][ T5115] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   94.435606][   T28] audit: type=1326 audit(2000000018.010:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.526475][   T28] audit: type=1326 audit(2000000018.010:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11333 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[   94.604531][T11363] futex_wake_op: syz.1.696 tries to shift op by -1; fix this program
[   94.626672][ T5244] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   94.710360][T11362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.860081][T11362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.996984][T11362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.159833][T11362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.182253][T11394] __nla_validate_parse: 5 callbacks suppressed
[   95.182271][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.708'.
[   95.245726][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.259369][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.282826][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.317661][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.339081][T11365] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.418752][T11365] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.647535][T11365] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.907243][T11365] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.929121][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'.
[   96.079558][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'.
[   96.106187][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.718'.
[   96.181680][T11437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11437 comm=syz.1.719
[   96.280397][T11446] lo speed is unknown, defaulting to 1000
[   96.486986][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.725'.
[   96.573109][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'.
[   96.637579][T11458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11458 comm=syz.0.728
[   96.753911][T11457] netlink: 'syz.0.728': attribute type 1 has an invalid length.
[   96.892812][T11457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.728'.
[   96.988668][T11467] bond1: (slave geneve2): making interface the new active one
[   97.068695][T11467] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   97.176663][ T5110] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   97.206750][ T5110] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   97.232953][T11457] bond1: entered promiscuous mode
[   97.238378][T11457] geneve2: entered promiscuous mode
[   97.259131][T11457] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.283020][ T5110] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   97.444974][T11474] team0 (unregistering): Port device team_slave_0 removed
[   97.499177][T11474] team0 (unregistering): Port device team_slave_1 removed
[   97.542941][ T5110] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   97.572192][T11481] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.614187][T11488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11488 comm=syz.3.738
[   98.388406][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[   98.427544][T11518] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   98.452766][T11520] xt_hashlimit: size too large, truncated to 1048576
[   98.506473][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   99.091675][T11534] lo speed is unknown, defaulting to 1000
[   99.169824][T11537] lo speed is unknown, defaulting to 1000
[   99.258121][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[   99.273865][T11541] netlink: 'syz.1.756': attribute type 30 has an invalid length.
[   99.284536][   T28] kauditd_printk_skb: 50 callbacks suppressed
[   99.284551][   T28] audit: type=1400 audit(2000000023.290:1371): avc:  denied  { setopt } for  pid=11533 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   99.950314][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.761'.
[   99.972839][   T28] audit: type=1400 audit(2000000023.610:1372): avc:  denied  { nlmsg_read } for  pid=11542 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   99.997307][ T5115] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.016303][ T5115] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.026584][ T5115] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.035327][ T5115] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.161394][T11570] process 'syz.1.767' launched './file1' with NULL argv: empty string added
[  100.170955][   T28] audit: type=1400 audit(2000000024.180:1373): avc:  denied  { execute_no_trans } for  pid=11569 comm="syz.1.767" path="/167/file1" dev="tmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  100.265744][T11577] netlink: 'syz.1.767': attribute type 1 has an invalid length.
[  100.292656][T11577] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.447406][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'.
[  100.612219][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'.
[  100.657594][T11596] netlink: 44 bytes leftover after parsing attributes in process `syz.1.776'.
[  100.683344][   T28] audit: type=1326 audit(2000000024.690:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.0.779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaabfbc799 code=0x0
[  100.778699][T11612] netlink: 'syz.1.783': attribute type 8 has an invalid length.
[  100.797170][   T28] audit: type=1400 audit(2000000024.800:1375): avc:  denied  { connect } for  pid=11614 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.836200][   T28] audit: type=1400 audit(2000000024.840:1376): avc:  denied  { getopt } for  pid=11614 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.901481][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'.
[  101.092173][T11634] netlink: 'syz.5.792': attribute type 13 has an invalid length.
[  101.299003][T11639] netlink: 596 bytes leftover after parsing attributes in process `syz.3.793'.
[  101.347042][   T28] audit: type=1400 audit(2000000025.360:1377): avc:  denied  { setopt } for  pid=11636 comm="syz.3.793" lport=44725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  101.525614][T11634] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.532833][T11634] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.725761][   T28] audit: type=1400 audit(2000000025.730:1378): avc:  denied  { create } for  pid=11642 comm="syz.0.795" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  101.793460][   T28] audit: type=1400 audit(2000000025.780:1379): avc:  denied  { unlink } for  pid=3312 comm="syz-executor" name="file7" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.092178][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.149281][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.745313][T11637] netlink: 'syz.3.793': attribute type 29 has an invalid length.
[  102.774446][ T4478] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.793127][ T4478] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.816036][   T28] audit: type=1400 audit(2000000026.820:1380): avc:  denied  { allowed } for  pid=11653 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  102.858849][ T4478] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.873574][ T4478] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.898934][ T4478] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.908406][ T4478] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.917148][ T4478] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.935231][ T4478] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.039171][T11667] team0 (unregistering): Port device team_slave_0 removed
[  103.150923][T11667] team0 (unregistering): Port device team_slave_1 removed
[  103.252180][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'.
[  104.280835][T11683] lo speed is unknown, defaulting to 1000
[  104.469891][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'.
[  104.834947][T11689] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.127265][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  105.127282][   T28] audit: type=1400 audit(2000000029.140:1387): avc:  denied  { create } for  pid=11714 comm="syz.5.817" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.163286][T11715] batadv_slave_1: entered promiscuous mode
[  105.187942][   T28] audit: type=1400 audit(2000000029.190:1388): avc:  denied  { write } for  pid=11714 comm="syz.5.817" name="file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.216711][T11715] bridge1: the hash_elasticity option has been deprecated and is always 16
[  105.245477][T11716] batadv_slave_1: left promiscuous mode
[  105.245846][   T28] audit: type=1400 audit(2000000029.190:1389): avc:  denied  { open } for  pid=11714 comm="syz.5.817" path="/68/file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.300793][   T28] audit: type=1400 audit(2000000029.190:1390): avc:  denied  { ioctl } for  pid=11714 comm="syz.5.817" path="/68/file0" dev="tmpfs" ino=371 ioctlcmd=0x1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.351579][   T28] audit: type=1400 audit(2000000029.290:1391): avc:  denied  { unlink } for  pid=5162 comm="syz-executor" name="file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.492459][T11708] lo speed is unknown, defaulting to 1000
[  105.523358][   T28] audit: type=1400 audit(2000000029.510:1392): avc:  denied  { shutdown } for  pid=11723 comm="syz.5.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  105.543717][   T28] audit: type=1400 audit(2000000029.510:1393): avc:  denied  { read } for  pid=11723 comm="syz.5.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  105.678600][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.821'.
[  105.921869][   T28] audit: type=1326 audit(2000000029.930:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11743 comm="syz.5.825" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bf6dc799 code=0x0
[  106.603001][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'.
[  106.656449][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  106.797429][T11775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.837'.
[  106.809102][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.839'.
[  106.829894][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.839'.
[  106.891199][   T28] audit: type=1400 audit(2000000030.890:1395): avc:  denied  { bind } for  pid=11782 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  107.016391][   T28] audit: type=1400 audit(2000000031.020:1396): avc:  denied  { cmd } for  pid=11796 comm="syz.1.847" path="socket:[14451]" dev="sockfs" ino=14451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  107.310240][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  107.320362][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  107.372936][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  107.421067][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  107.431771][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  107.556864][T11836] xt_hashlimit: size too large, truncated to 1048576
[  113.061651][T11879] xt_hashlimit: size too large, truncated to 1048576
[  113.223760][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  113.223796][   T28] audit: type=1400 audit(2000000037.230:1399): avc:  denied  { listen } for  pid=11881 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  113.609546][   T28] audit: type=1326 audit(2000000037.620:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe0798c799 code=0x0
[  113.959101][T11933] Q�6��\b��Y�4��: renamed from lo
[  114.004997][   T28] audit: type=1400 audit(2000000038.010:1401): avc:  denied  { mounton } for  pid=11932 comm="syz.4.883" path="/177/file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  114.193509][T11897] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  114.268995][T11897] x_tables: duplicate underflow at hook 1
[  114.496272][   T28] audit: type=1326 audit(2000000038.500:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  114.530719][   T28] audit: type=1326 audit(2000000038.500:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  114.593488][   T28] audit: type=1326 audit(2000000038.530:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  114.636544][   T28] audit: type=1326 audit(2000000038.530:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  114.659108][T11943] netlink: 'syz.3.885': attribute type 13 has an invalid length.
[  114.683416][   T28] audit: type=1326 audit(2000000038.530:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  114.725552][   T28] audit: type=1326 audit(2000000038.530:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  114.763889][   T28] audit: type=1326 audit(2000000038.530:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  115.096821][T11966] __nla_validate_parse: 49 callbacks suppressed
[  115.096851][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'.
[  115.364782][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'.
[  116.415143][T11983] batadv_slave_1: entered promiscuous mode
[  116.687467][T11993] futex_wake_op: syz.1.900 tries to shift op by -1; fix this program
[  117.197609][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'.
[  117.206781][T12007] openvswitch: netlink: Flow key attr not present in new flow.
[  117.223230][T11982] batadv_slave_1: left promiscuous mode
[  117.276472][T12008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.906'.
[  118.584488][T12048] futex_wake_op: syz.3.915 tries to shift op by -1; fix this program
[  118.724072][T12054] xt_TCPMSS: Only works on TCP SYN packets
[  118.945369][T12058] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  119.675905][T12076] netlink: 112 bytes leftover after parsing attributes in process `syz.0.927'.
[  120.105511][   T28] kauditd_printk_skb: 66 callbacks suppressed
[  120.105527][   T28] audit: type=1400 audit(2000000044.110:1475): avc:  denied  { nlmsg_write } for  pid=12085 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  120.142765][   T28] audit: type=1326 audit(2000000044.150:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.0.930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaabfbc799 code=0x0
[  120.251500][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'.
[  120.339283][   T28] audit: type=1400 audit(2000000044.350:1477): avc:  denied  { map } for  pid=12103 comm="syz.4.938" path="socket:[14838]" dev="sockfs" ino=14838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  120.386384][   T28] audit: type=1400 audit(2000000044.350:1478): avc:  denied  { read } for  pid=12103 comm="syz.4.938" path="socket:[14838]" dev="sockfs" ino=14838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  120.387847][T12107] futex_wake_op: syz.4.939 tries to shift op by -1; fix this program
[  120.432997][   T28] audit: type=1400 audit(2000000044.380:1479): avc:  denied  { mounton } for  pid=12102 comm="syz.3.937" path="/231/file0" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  120.542852][   T28] audit: type=1400 audit(2000000044.550:1480): avc:  denied  { ioctl } for  pid=12109 comm="syz.4.940" path="socket:[14856]" dev="sockfs" ino=14856 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  120.578214][T12112] netlink: 'syz.4.941': attribute type 3 has an invalid length.
[  120.586584][T12112] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6
[  120.593126][    C1] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6
[  120.639139][T12112] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  120.711615][T12121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12121 comm=syz.4.941
[  121.477793][T12157] futex_wake_op: syz.4.951 tries to shift op by -1; fix this program
[  122.036558][   T28] audit: type=1326 audit(2000000046.040:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.3.958" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[  122.121509][T12185] xt_hashlimit: size too large, truncated to 1048576
[  122.142737][T12183] xt_hashlimit: size too large, truncated to 1048576
[  122.333125][T12198] futex_wake_op: syz.0.964 tries to shift op by -1; fix this program
[  122.366534][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.965'.
[  122.450184][   T28] audit: type=1400 audit(2000000046.460:1482): avc:  denied  { create } for  pid=12200 comm="syz.5.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  122.523527][T12210] netlink: 14 bytes leftover after parsing attributes in process `syz.5.966'.
[  122.707705][   T28] audit: type=1400 audit(2000000046.720:1483): avc:  denied  { mounton } for  pid=12216 comm="syz.4.968" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  122.806968][T12225] gretap1: entered allmulticast mode
[  123.135652][   T28] audit: type=1400 audit(2000000047.140:1484): avc:  denied  { mount } for  pid=12252 comm="syz.3.982" name="/" dev="rpc_pipefs" ino=15067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  123.447611][T12249] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.454869][T12249] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.069734][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.130991][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.825019][T12249] bond1: left promiscuous mode
[  124.834262][T12249] geneve2: left promiscuous mode
[  124.896443][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.925064][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  124.935361][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.966145][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  124.979472][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.016405][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  125.045615][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.068220][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  125.205564][T12303] futex_wake_op: syz.1.1000 tries to shift op by -1; fix this program
[  125.524370][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  125.543874][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  125.816830][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  125.816849][   T28] audit: type=1326 audit(2000000049.730:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12322 comm="syz.3.1007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[  126.128018][T12343] futex_wake_op: syz.4.1013 tries to shift op by -1; fix this program
[  126.608798][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'.
[  127.141856][T12383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1024'.
[  127.232989][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'.
[  129.176087][T12392] xt_hashlimit: size too large, truncated to 1048576
[  129.616796][T12411] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1032'.
[  129.649683][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  129.751915][   T28] audit: type=1326 audit(2000000053.760:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  129.784349][   T28] audit: type=1326 audit(2000000053.760:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  129.866501][   T28] audit: type=1326 audit(2000000053.760:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  129.891371][   T28] audit: type=1326 audit(2000000053.780:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  129.916120][   T28] audit: type=1326 audit(2000000053.780:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  129.944016][   T28] audit: type=1326 audit(2000000053.790:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  130.026522][   T28] audit: type=1326 audit(2000000053.790:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  130.091623][T12439] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  130.208095][   T28] audit: type=1326 audit(2000000053.790:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  130.276800][   T28] audit: type=1326 audit(2000000053.790:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  131.003907][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  131.003987][   T28] audit: type=1400 audit(2000000054.640:1501): avc:  denied  { connect } for  pid=12471 comm="syz.5.1053" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  131.394092][T12489] netlink: 'syz.0.1059': attribute type 1 has an invalid length.
[  131.566589][T12491] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.596958][T12491] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  131.649972][T12492] bond2: (slave gretap1): making interface the new active one
[  131.663173][T12492] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  131.679679][T12489] macvlan2: entered promiscuous mode
[  131.685028][T12489] macvlan2: entered allmulticast mode
[  131.703636][T12489] bond2: entered promiscuous mode
[  131.710143][T12489] gretap1: entered promiscuous mode
[  131.721119][T12489] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  131.734384][T12489] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  131.772642][T12489] bond2: left promiscuous mode
[  131.777697][T12489] gretap1: left promiscuous mode
[  131.800326][T12495] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  131.852732][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'.
[  131.862328][T12512] openvswitch: netlink: Flow key attr not present in new flow.
[  132.036191][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'.
[  132.567497][T12543] geneve2: entered promiscuous mode
[  132.670647][T12552] xt_hashlimit: size too large, truncated to 1048576
[  132.784329][   T28] audit: type=1400 audit(2000000056.790:1502): avc:  denied  { listen } for  pid=12554 comm="syz.3.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  132.813685][T12557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1081'.
[  132.838924][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'.
[  132.850671][   T28] audit: type=1400 audit(2000000056.790:1503): avc:  denied  { accept } for  pid=12554 comm="syz.3.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  133.421782][   T28] audit: type=1400 audit(2000000057.430:1504): avc:  denied  { create } for  pid=12595 comm="syz.5.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  133.453739][T12596] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1092'.
[  133.462873][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'.
[  134.490816][T12620] netlink: 'syz.5.1099': attribute type 1 has an invalid length.
[  135.628173][T12628] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  135.659014][T12625] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  135.678247][T12628] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  135.705352][T12625] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  135.760089][T12629] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  135.831952][T12631] bond1: (slave gretap1): making interface the new active one
[  135.863321][T12631] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  135.909972][T12620] macvlan2: entered promiscuous mode
[  135.921905][T12620] macvlan2: entered allmulticast mode
[  135.933746][T12620] bond1: entered promiscuous mode
[  135.945608][T12620] gretap1: entered promiscuous mode
[  135.958643][T12620] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  135.983636][T12620] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  136.005043][T12620] bond1: left promiscuous mode
[  136.011266][T12620] gretap1: left promiscuous mode
[  136.833419][   T28] audit: type=1400 audit(2000000060.840:1505): avc:  denied  { setopt } for  pid=12660 comm="syz.4.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  136.953306][T12667] futex_wake_op: syz.5.1113 tries to shift op by -1; fix this program
[  137.008905][   T28] audit: type=1326 audit(2000000060.950:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  137.276453][   T28] audit: type=1326 audit(2000000060.950:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d10cdc799 code=0x7ffc0000
[  137.336911][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'.
[  137.358008][   T28] audit: type=1400 audit(2000000061.260:1508): avc:  denied  { execute } for  pid=12660 comm="syz.4.1111" path="/file1" dev="hugetlbfs" ino=16292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  137.444558][T12677] futex_wake_op: syz.5.1116 tries to shift op by -1; fix this program
[  137.542935][T12680] netlink: 'syz.5.1117': attribute type 19 has an invalid length.
[  137.550961][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1117'.
[  137.564119][ T5121] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.573268][ T5121] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.583498][T12680] netlink: 'syz.5.1117': attribute type 19 has an invalid length.
[  137.591412][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1117'.
[  137.600759][ T5121] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.620422][ T5121] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.638721][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'.
[  137.836958][   T28] audit: type=1326 audit(2000000061.840:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.4.1123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d10cdc799 code=0x0
[  138.057518][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1125'.
[  138.394229][   T28] audit: type=1400 audit(2000000062.400:1510): avc:  denied  { getopt } for  pid=12718 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  138.776562][   T28] audit: type=1400 audit(2000000062.780:1511): avc:  denied  { write } for  pid=12724 comm="syz.0.1132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  138.973494][   T28] audit: type=1326 audit(2000000062.980:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12741 comm="syz.0.1136" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaabfbc799 code=0x0
[  139.101430][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'.
[  139.408927][   T28] audit: type=1400 audit(2000000063.420:1513): avc:  denied  { execute_no_trans } for  pid=12760 comm="syz.3.1142" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  139.578900][T12770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1147'.
[  139.588798][T12770] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1147'.
[  139.597933][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'.
[  139.607444][T12770] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1147'.
[  139.746664][T12781] openvswitch: netlink: Missing key (keys=40, expected=100)
[  140.035089][T12791] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  142.807674][T12851] __nla_validate_parse: 5 callbacks suppressed
[  142.807695][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'.
[  142.822973][T12851] openvswitch: netlink: Flow key attr not present in new flow.
[  143.318260][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'.
[  143.331222][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'.
[  143.579669][   T28] audit: type=1400 audit(2000000067.580:1514): avc:  denied  { connect } for  pid=12875 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  143.879595][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'.
[  143.983296][T12892] openvswitch: netlink: Flow key attr not present in new flow.
[  144.005968][T12895] Cannot find del_set index 1 as target
[  144.031524][   T28] audit: type=1400 audit(2000000068.040:1515): avc:  denied  { sqpoll } for  pid=12894 comm="syz.5.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  144.103182][T12898] xt_hashlimit: size too large, truncated to 1048576
[  144.708847][   T28] audit: type=1326 audit(2000000068.720:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12910 comm="syz.4.1195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d10cdc799 code=0x0
[  144.818185][   T28] audit: type=1326 audit(2000000068.740:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12912 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  144.842376][T12919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12919 comm=syz.0.1196
[  144.930908][   T28] audit: type=1326 audit(2000000068.740:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12912 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  145.012905][   T28] audit: type=1326 audit(2000000068.740:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12912 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  145.087635][   T28] audit: type=1326 audit(2000000068.740:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12912 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  145.161580][   T28] audit: type=1326 audit(2000000068.740:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12912 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  145.201421][   T28] audit: type=1326 audit(2000000068.740:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12912 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  145.225007][   T28] audit: type=1326 audit(2000000068.740:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12912 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  145.279238][ T4478] tipc: Subscription rejected, illegal request
[  145.674733][T12974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1213'.
[  145.684750][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'.
[  146.267843][T12986] xfrm0 speed is unknown, defaulting to 1000
[  146.381155][T12986] xfrm0 speed is unknown, defaulting to 1000
[  146.403012][T12986] xfrm0 speed is unknown, defaulting to 1000
[  146.728891][T12995] netlink: 'syz.3.1219': attribute type 1 has an invalid length.
[  146.767972][T12995] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1219'.
[  147.442991][T12986] infiniband syz1: set down
[  147.447715][    T9] xfrm0 speed is unknown, defaulting to 1000
[  147.453791][T12986] infiniband syz1: added xfrm0
[  147.459950][T12986] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  147.460176][T12986] infiniband syz1: Couldn't open port 1
[  147.480567][T12986] RDS/IB: syz1: added
[  147.492941][T12986] smc: adding ib device syz1 with port count 1
[  147.525489][T12986] smc:    ib device syz1 port 1 has no pnetid
[  147.547333][    T9] xfrm0 speed is unknown, defaulting to 1000
[  147.553653][T12986] xfrm0 speed is unknown, defaulting to 1000
[  147.616052][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'.
[  147.638302][T12986] xfrm0 speed is unknown, defaulting to 1000
[  147.683666][T12986] xfrm0 speed is unknown, defaulting to 1000
[  147.745154][T12986] xfrm0 speed is unknown, defaulting to 1000
[  147.827241][T12986] xfrm0 speed is unknown, defaulting to 1000
[  147.908727][T12986] xfrm0 speed is unknown, defaulting to 1000
[  148.551380][T13035] futex_wake_op: syz.1.1234 tries to shift op by -1; fix this program
[  148.723657][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1235'.
[  149.063597][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'.
[  149.266412][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1240'.
[  149.891889][   T28] kauditd_printk_skb: 87 callbacks suppressed
[  149.891913][   T28] audit: type=1400 audit(2000000073.900:1611): avc:  denied  { write } for  pid=13068 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  149.920322][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'.
[  149.990289][T13076] futex_wake_op: syz.5.1247 tries to shift op by -1; fix this program
[  150.087454][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1248'.
[  150.097212][T13079] openvswitch: netlink: Flow key attr not present in new flow.
[  150.712004][T13083] futex_wake_op: syz.1.1249 tries to shift op by -1; fix this program
[  150.734921][T13085] futex_wake_op: syz.4.1250 tries to shift op by -1; fix this program
[  151.133389][T13103] xt_hashlimit: size too large, truncated to 1048576
[  151.231187][T13108] bridge0: entered promiscuous mode
[  151.244097][T13108] macsec1: entered promiscuous mode
[  151.296868][T13108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1259'.
[  151.600710][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'.
[  153.035811][T13212] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1298'.
[  153.089361][   T28] audit: type=1400 audit(2000000077.100:1612): avc:  denied  { getopt } for  pid=13211 comm="syz.5.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  153.301809][T13231] xt_hashlimit: size too large, truncated to 1048576
[  153.723898][T13255] futex_wake_op: syz.4.1311 tries to shift op by -1; fix this program
[  153.754716][T13258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1313'.
[  153.805329][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1313'.
[  153.858563][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1313'.
[  154.008823][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'.
[  154.020227][T13265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13265 comm=syz.3.1316
[  154.038992][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1317'.
[  154.048298][T13269] openvswitch: netlink: Flow key attr not present in new flow.
[  154.050486][T13266] netlink: 'syz.3.1316': attribute type 1 has an invalid length.
[  154.095523][T13265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1316'.
[  154.120976][T13265] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.133265][T13276] xt_hashlimit: size too large, truncated to 1048576
[  154.519490][T13303] futex_wake_op: syz.4.1325 tries to shift op by -1; fix this program
[  154.608903][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'.
[  154.636026][T13306] openvswitch: netlink: Flow key attr not present in new flow.
[  155.319536][T13330] xt_hashlimit: size too large, truncated to 1048576
[  155.778055][T13339] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  155.785225][T13339] xfrm0 speed is unknown, defaulting to 1000
[  155.828719][T13352] futex_wake_op: syz.4.1339 tries to shift op by -1; fix this program
[  156.166458][T13364] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  156.502238][T13378] xt_hashlimit: size too large, truncated to 1048576
[  156.509683][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'.
[  156.802863][T13385] futex_wake_op: syz.3.1349 tries to shift op by -1; fix this program
[  157.506475][   T28] audit: type=1400 audit(2000000081.500:1613): avc:  denied  { getopt } for  pid=13397 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  157.644801][T13403] futex_wake_op: syz.0.1352 tries to shift op by -1; fix this program
[  158.317281][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'.
[  158.377911][T13434] xt_hashlimit: size too large, truncated to 1048576
[  159.228787][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'.
[  159.289562][T13479] futex_wake_op: syz.5.1377 tries to shift op by -1; fix this program
[  160.368913][T13500] openvswitch: netlink: ct_state flags ffffffff unsupported
[  160.410962][   T28] audit: type=1400 audit(2000000084.420:1614): avc:  denied  { getopt } for  pid=13496 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  161.459764][T13558] xfrm0: entered promiscuous mode
[  162.333408][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  162.345274][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  162.357277][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  162.470706][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  162.528025][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  162.550808][   T28] audit: type=1400 audit(2000000086.560:1615): avc:  denied  { ioctl } for  pid=13574 comm="syz.4.1413" path="socket:[17330]" dev="sockfs" ino=17330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  162.559852][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'.
[  162.780336][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  162.790627][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  163.011662][T13591] futex_wake_op: syz.4.1417 tries to shift op by -1; fix this program
[  163.043198][T13593] futex_wake_op: syz.3.1418 tries to shift op by -1; fix this program
[  163.736868][   T28] audit: type=1400 audit(2000000087.750:1616): avc:  denied  { create } for  pid=13624 comm="syz.3.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  163.795052][T13630] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  163.802708][T13630] xfrm0 speed is unknown, defaulting to 1000
[  163.988364][   T28] audit: type=1400 audit(2000000088.000:1617): avc:  denied  { create } for  pid=13628 comm="syz.3.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  164.054445][T13635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13635 comm=syz.1.1431
[  164.259124][   T28] audit: type=1400 audit(2000000088.270:1618): avc:  denied  { read open } for  pid=13645 comm="syz.5.1436" path="/" dev="configfs" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  164.536942][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1442'.
[  166.128928][T13709] futex_wake_op: syz.1.1459 tries to shift op by -1; fix this program
[  166.168993][T13704] netlink: 'syz.3.1457': attribute type 10 has an invalid length.
[  166.204706][T13704] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  166.310660][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1462'.
[  166.369231][T13719] xt_hashlimit: size too large, truncated to 1048576
[  166.904386][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'.
[  166.930131][T13754] futex_wake_op: syz.5.1475 tries to shift op by -1; fix this program
[  167.748356][T13809] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1496'.
[  167.770061][T13809] netlink: zone id is out of range
[  167.782785][T13809] netlink: zone id is out of range
[  167.817577][T13809] netlink: set zone limit has 8 unknown bytes
[  168.572662][T13851] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1510'.
[  170.981113][   T28] audit: type=1326 audit(2000000094.990:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.5.1528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bf6dc799 code=0x0
[  172.176757][T13954] 9p: Bad value for 'rfdno'
[  172.291682][T13960] futex_wake_op: syz.1.1558 tries to shift op by -1; fix this program
[  172.732975][   T28] audit: type=1326 audit(2000000096.730:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.1.1569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe0798c799 code=0x0
[  173.204519][T14028] ------------[ cut here ]------------
[  173.211915][T14028] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0)
[  173.228444][T14028] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.3.1578/14028
[  173.239644][T14028] Modules linked in:
[  173.243602][T14028] CPU: 0 UID: 0 PID: 14028 Comm: syz.3.1578 Not tainted syzkaller #0 PREEMPT(full) 
[  173.253137][T14028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  173.263942][T14028] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660
[  173.270303][T14028] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08
[  173.290785][T14028] RSP: 0018:ffffc9000197f368 EFLAGS: 00010246
[  173.297020][T14028] RAX: ffff8881019c4c78 RBX: 0000000000000000 RCX: 0000000000000002
[  173.305064][T14028] RDX: ffffffff868174df RSI: ffffffff867ebb6f RDI: ffffffff871d4090
[  173.313114][T14028] RBP: ffff88810a2ee350 R08: 0000000000000000 R09: 0000000000000002
[  173.321816][T14028] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88810a2ee310
[  173.329900][T14028] R13: 0000000000000000 R14: ffff88810a2ee35c R15: ffff88810a2ee348
[  173.338009][T14028] FS:  00007effdd1c56c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000
[  173.347579][T14028] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.354200][T14028] CR2: 00007effdd1c4ff8 CR3: 00000001262ce000 CR4: 00000000003506f0
[  173.362309][T14028] DR0: 00000000000003ff DR1: 0000000000000000 DR2: 0000000000000000
[  173.370405][T14028] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  173.379113][T14028] Call Trace:
[  173.382465][T14028]  <TASK>
[  173.385447][T14028]  reg_set_min_max+0x21c/0x260
[  173.390362][T14028]  check_cond_jmp_op+0x1355/0x1ab0
[  173.395666][T14028]  do_check+0x4a9b/0x9860
[  173.400233][T14028]  ? __pfx_verbose+0x10/0x10
[  173.405031][T14028]  ? __pfx_disasm_kfunc_name+0x10/0x10
[  173.411354][T14028]  do_check_common+0xd0b/0x1630
[  173.416267][T14028]  bpf_check+0x2f78/0xcc30
[  173.420838][T14028]  ? perf_cgroup_set_timestamp+0xfe/0x120
[  173.426652][T14028]  ? ctx_sched_in+0x3e9/0x410
[  173.431363][T14028]  ? find_lock_lowest_rq+0x16/0x220
[  173.437263][T14028]  ? push_rt_task+0xb4/0x270
[  173.441961][T14028]  ? _raw_spin_unlock+0x9/0x30
[  173.446799][T14028]  ? finish_task_switch+0x7d/0x280
[  173.451936][T14028]  ? __schedule+0x85a/0xd40
[  173.456504][T14028]  ? css_rstat_updated+0xbb/0x280
[  173.461574][T14028]  ? __rcu_read_unlock+0x4e/0x70
[  173.467252][T14028]  ? avc_has_perm_noaudit+0xab/0x130
[  173.472629][T14028]  ? avc_has_perm+0x101/0x190
[  173.477463][T14028]  ? selinux_bpf_prog_load+0x197/0x1c0
[  173.483132][T14028]  ? security_bpf_prog_load+0x9e/0x140
[  173.488768][T14028]  bpf_prog_load+0xf76/0x1140
[  173.493503][T14028]  ? security_bpf+0x2b/0x90
[  173.498854][T14028]  __sys_bpf+0x505/0x7e0
[  173.503181][T14028]  __x64_sys_bpf+0x41/0x50
[  173.507693][T14028]  x64_sys_call+0x10cb/0x3020
[  173.512405][T14028]  do_syscall_64+0x12c/0x370
[  173.517070][T14028]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[  173.524233][T14028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.530946][T14028] RIP: 0033:0x7effde7ac799
[  173.535423][T14028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.555142][T14028] RSP: 002b:00007effdd1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  173.564405][T14028] RAX: ffffffffffffffda RBX: 00007effdea26180 RCX: 00007effde7ac799
[  173.572533][T14028] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005
[  173.580625][T14028] RBP: 00007effde842bd9 R08: 0000000000000000 R09: 0000000000000000
[  173.589354][T14028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.597420][T14028] R13: 00007effdea26218 R14: 00007effdea26180 R15: 00007ffee4ae68d8
[  173.605530][T14028]  </TASK>
[  173.608695][T14028] ---[ end trace 0000000000000000 ]---
[  173.773130][T14029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1577'.
[  174.659321][T14055] futex_wake_op: syz.3.1592 tries to shift op by -1; fix this program
[  175.196906][T14075] x_tables: duplicate underflow at hook 2
[  175.207946][T14076] raw_sendmsg: syz.1.1599 forgot to set AF_INET. Fix it!
[  175.303087][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'.
[  175.314588][T14081] netlink: 'syz.4.1601': attribute type 1 has an invalid length.
[  175.324748][T14085] futex_wake_op: syz.1.1603 tries to shift op by -1; fix this program
[  175.355592][T14081] bond2: (slave geneve3): making interface the new active one
[  175.363504][T14081] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  175.373820][  T108] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  175.380707][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1601'.
[  175.392661][  T108] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  175.424755][  T108] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  175.457216][  T108] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  175.588604][T14092] xt_hashlimit: size too large, truncated to 1048576
[  175.743842][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'.
[  175.956188][   T28] audit: type=1326 audit(2000000099.940:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14110 comm="syz.0.1610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaabfbc799 code=0x0
[  176.154495][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'.
[  176.222003][   T28] audit: type=1400 audit(2000000100.230:1622): avc:  denied  { nlmsg_read } for  pid=14122 comm="syz.5.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  176.243537][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'.
[  176.263223][T14133] xt_hashlimit: size too large, truncated to 1048576
[  176.880898][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'.
[  177.653252][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'.
[  177.794448][   T28] audit: type=1400 audit(2000000101.800:1623): avc:  denied  { bind } for  pid=14204 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  178.321785][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'.
[  178.363424][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'.
[  179.227096][   T28] audit: type=1326 audit(2000000103.230:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz.5.1668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bf6dc799 code=0x0
[  179.375978][   T28] audit: type=1400 audit(2000000103.380:1625): avc:  denied  { setopt } for  pid=14278 comm="syz.3.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  179.447251][T14288] __nla_validate_parse: 2 callbacks suppressed
[  179.447267][T14288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1674'.
[  179.465067][   T28] audit: type=1400 audit(2000000103.470:1626): avc:  denied  { ioctl } for  pid=14287 comm="syz.3.1674" path="socket:[20914]" dev="sockfs" ino=20914 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  179.518385][   T28] audit: type=1400 audit(2000000103.530:1627): avc:  denied  { getopt } for  pid=14287 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  179.538941][T14293] bond2: option mode: unable to set because the bond device has slaves
[  179.559615][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'.
[  179.569171][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'.
[  179.627598][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1679'.
[  179.743945][T14306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'.
[  180.089354][T14328] futex_wake_op: syz.5.1687 tries to shift op by -1; fix this program
[  180.130756][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'.
[  180.150965][   T28] audit: type=1400 audit(2000000104.150:1628): avc:  denied  { bind } for  pid=14338 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  180.172769][   T28] audit: type=1400 audit(2000000104.150:1629): avc:  denied  { lock } for  pid=14338 comm="syz.4.1692" path="socket:[20977]" dev="sockfs" ino=20977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  180.315801][   T28] audit: type=1326 audit(2000000104.320:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.1.1698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x0
[  180.345515][   T28] audit: type=1326 audit(2000000104.350:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.1697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bf6dc799 code=0x0
[  180.780989][T14376] futex_wake_op: syz.4.1705 tries to shift op by -1; fix this program
[  181.194889][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'.
[  181.761241][T14404] futex_wake_op: syz.3.1716 tries to shift op by -1; fix this program
[  181.788172][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'.
[  181.899815][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'.
[  181.946231][   T28] audit: type=1326 audit(2000000105.950:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.110852][   T28] audit: type=1326 audit(2000000105.950:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.147463][   T28] audit: type=1326 audit(2000000105.950:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.171152][   T28] audit: type=1326 audit(2000000105.950:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.209514][   T28] audit: type=1326 audit(2000000105.980:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.237994][   T28] audit: type=1326 audit(2000000105.980:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.261802][   T28] audit: type=1326 audit(2000000105.980:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.285548][   T28] audit: type=1326 audit(2000000105.980:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.309898][T14431] 9pnet: p9_errstr2errno: server reported unknown error ��
[  182.310695][   T28] audit: type=1326 audit(2000000105.980:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.352092][   T28] audit: type=1326 audit(2000000105.980:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  182.748386][T14447] futex_wake_op: syz.1.1729 tries to shift op by -1; fix this program
[  183.365178][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'.
[  183.807334][T14510] tipc: Started in network mode
[  183.816539][T14510] tipc: Node identity 4, cluster identity 4711
[  183.831115][T14510] tipc: Node number set to 4
[  183.849491][T14516] futex_wake_op: syz.4.1755 tries to shift op by 36; fix this program
[  184.871422][T14535] __nla_validate_parse: 5 callbacks suppressed
[  184.871438][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'.
[  185.074305][T14550] IPv6: Can't replace route, no match found
[  185.472689][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'.
[  185.543179][T14563] futex_wake_op: syz.5.1769 tries to shift op by -1; fix this program
[  185.697556][T14563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14563 comm=syz.5.1769
[  186.036135][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'.
[  186.158959][T14595] openvswitch: netlink: Missing key (keys=40, expected=80)
[  186.182176][T14608] futex_wake_op: syz.3.1786 tries to shift op by -1; fix this program
[  186.355859][T14616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14616 comm=syz.3.1786
[  186.732388][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'.
[  186.877675][T14632] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  186.884923][T14632] xfrm0 speed is unknown, defaulting to 1000
[  186.919588][T14633] Q�6�`Ҙ: renamed from lo
[  187.132550][T14651] futex_wake_op: syz.4.1801 tries to shift op by -1; fix this program
[  187.272972][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'.
[  188.085222][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1814'.
[  188.094589][T14730] openvswitch: netlink: Flow key attr not present in new flow.
[  188.257331][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'.
[  188.300566][T14779] futex_wake_op: syz.4.1819 tries to shift op by -1; fix this program
[  188.853813][T14800] bridge_slave_1: left allmulticast mode
[  188.860262][T14800] bridge_slave_1: left promiscuous mode
[  188.866125][T14800] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.876771][T14800] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  188.899710][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'.
[  188.963143][T14814] futex_wake_op: syz.0.1831 tries to shift op by -1; fix this program
[  189.332294][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'.
[  189.540121][T14852] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  189.565713][T14852] xfrm0 speed is unknown, defaulting to 1000
[  189.721323][T14862] futex_wake_op: syz.4.1848 tries to shift op by -1; fix this program
[  189.902682][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  189.902699][   T28] audit: type=1326 audit(2000000113.910:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14871 comm="syz.4.1852" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d10cdc799 code=0x0
[  189.994074][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1853'.
[  190.036100][T14879] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  190.054387][T14879] xfrm0 speed is unknown, defaulting to 1000
[  190.302741][T14879] Q�6�`Ҙ: renamed from lo
[  190.701838][T14907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1861'.
[  190.722842][T14907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1861'.
[  191.065871][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'.
[  191.097733][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'.
[  191.109015][T14921] openvswitch: netlink: Flow key attr not present in new flow.
[  191.282150][   T28] audit: type=1326 audit(2000000115.290:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14941 comm="syz.5.1873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bf6dc799 code=0x0
[  192.135541][T14976] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  192.143597][T14976] xfrm0 speed is unknown, defaulting to 1000
[  192.443051][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1890'.
[  192.492856][T14997] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1890'.
[  192.837794][T15037] futex_wake_op: syz.5.1900 tries to shift op by -1; fix this program
[  192.914354][   T28] audit: type=1326 audit(2000000116.920:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15038 comm="syz.3.1902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[  192.979950][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1904'.
[  193.360081][T15068] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  193.368134][T15068] xfrm0 speed is unknown, defaulting to 1000
[  194.427195][T15109] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  194.710890][T15126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1929'.
[  194.957819][T15146] futex_wake_op: syz.1.1935 tries to shift op by -1; fix this program
[  195.108007][T15150] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  196.021003][T15166] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1942'.
[  196.125825][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'.
[  196.231833][T15181] futex_wake_op: syz.4.1948 tries to shift op by -1; fix this program
[  197.031677][T15203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1957'.
[  197.043136][T15204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1955'.
[  197.309956][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'.
[  197.776201][T15223] futex_wake_op: syz.0.1965 tries to shift op by -1; fix this program
[  197.943524][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'.
[  198.286466][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'.
[  198.450258][T15242] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1973'.
[  198.496550][   T28] audit: type=1400 audit(2000000122.470:1658): avc:  denied  { connect } for  pid=15240 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  198.539669][   T28] audit: type=1400 audit(2000000122.470:1659): avc:  denied  { ioctl } for  pid=15240 comm="syz.4.1973" path="socket:[23239]" dev="sockfs" ino=23239 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  198.805504][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'.
[  199.003533][   T28] audit: type=1400 audit(2000000123.010:1660): avc:  denied  { watch watch_reads } for  pid=15273 comm="syz.1.1985" path="/417/file1" dev="tmpfs" ino=2236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  199.287971][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1986'.
[  201.202190][   T28] audit: type=1400 audit(2000000125.210:1661): avc:  denied  { nlmsg_tty_audit } for  pid=15296 comm="syz.3.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  202.222429][T15317] futex_wake_op: syz.5.1997 tries to shift op by -1; fix this program
[  202.466287][T15336] __nla_validate_parse: 3 callbacks suppressed
[  202.466321][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'.
[  202.778095][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2007'.
[  203.847689][   T28] audit: type=1400 audit(2000000127.830:1662): avc:  denied  { setopt } for  pid=15381 comm="syz.3.2022" lport=46798 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  204.076370][   T28] audit: type=1400 audit(2000000127.830:1663): avc:  denied  { connect } for  pid=15381 comm="syz.3.2022" lport=46798 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  204.127246][   T28] audit: type=1400 audit(2000000127.830:1664): avc:  denied  { name_connect } for  pid=15381 comm="syz.3.2022" dest=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  204.179092][   T28] audit: type=1400 audit(2000000127.880:1665): avc:  denied  { getopt } for  pid=15381 comm="syz.3.2022" lport=46798 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  204.434795][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2025'.
[  204.940099][T15409] futex_wake_op: syz.5.2032 tries to shift op by -1; fix this program
[  205.145297][ T5248] IPVS: starting estimator thread 0...
[  205.234790][T15415] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2034'.
[  205.244708][T15413] IPVS: using max 2256 ests per chain, 112800 per kthread
[  205.363068][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'.
[  206.203144][T15443] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2043'.
[  206.262127][   T28] audit: type=1326 audit(2000000130.270:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15442 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[  206.295676][   T28] audit: type=1326 audit(2000000130.270:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15442 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[  206.322383][   T28] audit: type=1326 audit(2000000130.270:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15442 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[  206.323044][T15449] hsr0: entered promiscuous mode
[  206.346281][   T28] audit: type=1326 audit(2000000130.270:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15442 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[  206.385392][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2046'.
[  206.412481][T15449] hsr0: left promiscuous mode
[  206.422238][   T28] audit: type=1326 audit(2000000130.270:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15442 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[  206.447069][   T28] audit: type=1326 audit(2000000130.270:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15442 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde7ac799 code=0x7ffc0000
[  206.693384][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'.
[  206.702825][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'.
[  206.879147][T15482] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2059'.
[  206.949717][T15488] futex_wake_op: syz.0.2062 tries to shift op by -1; fix this program
[  206.995798][T15490] x_tables: ip_tables: udp match: only valid for protocol 17
[  207.153465][T15497] xt_hashlimit: size too large, truncated to 1048576
[  207.570421][   T50] tipc: Subscription rejected, illegal request
[  207.781606][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'.
[  208.123035][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'.
[  208.922045][   T28] kauditd_printk_skb: 284 callbacks suppressed
[  208.922059][   T28] audit: type=1326 audit(2000000132.930:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe0794cfce code=0x7ffc0000
[  209.022310][   T28] audit: type=1326 audit(2000000133.030:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe0794cfce code=0x7ffc0000
[  209.104813][T15581] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  209.178595][   T28] audit: type=1326 audit(2000000133.130:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.1.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbe0798c799 code=0x7ffc0000
[  209.239377][T15581] xfrm0 speed is unknown, defaulting to 1000
[  210.129883][   T28] audit: type=1326 audit(2000000134.140:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15604 comm="syz.4.2097" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d10cdc799 code=0x0
[  210.618944][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2104'.
[  211.532217][T15658] futex_wake_op: syz.1.2117 tries to shift op by -1; fix this program
[  211.612887][T15664] xt_hashlimit: size too large, truncated to 1048576
[  211.855590][T15678] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2123'.
[  212.042244][   T28] audit: type=1400 audit(2000000136.050:1960): avc:  denied  { bind } for  pid=15684 comm="syz.0.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  212.062968][T15685] xt_bpf: check failed: parse error
[  212.068504][T15690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2127'.
[  212.082723][   T28] audit: type=1326 audit(2000000136.080:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15684 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  212.111161][   T28] audit: type=1326 audit(2000000136.080:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15684 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  212.135254][   T28] audit: type=1326 audit(2000000136.080:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15684 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  212.159900][   T28] audit: type=1326 audit(2000000136.080:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15684 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  212.214767][   T28] audit: type=1326 audit(2000000136.080:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15684 comm="syz.0.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaabfbc799 code=0x7ffc0000
[  212.744535][T15721] xt_hashlimit: size too large, truncated to 1048576
[  213.147705][T15733] netlink: 'syz.1.2140': attribute type 1 has an invalid length.
[  213.867869][T15743] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  213.996345][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  213.996431][   T28] audit: type=1326 audit(2000000138.000:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15746 comm="syz.3.2146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[  215.559725][T15789] futex_wake_op: syz.5.2161 tries to shift op by -1; fix this program
[  215.673305][T15796] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  216.123160][T15821] xt_hashlimit: size too large, truncated to 1048576
[  216.520945][T15831] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  216.534277][T15835] futex_wake_op: syz.4.2176 tries to shift op by -1; fix this program
[  217.090873][T15863] xt_hashlimit: size too large, truncated to 1048576
[  217.123572][T15859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=15859 comm=syz.0.2177
[  217.575691][T15886] futex_wake_op: syz.4.2191 tries to shift op by -1; fix this program
[  217.755061][T15888] hsr0: entered promiscuous mode
[  217.834396][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2192'.
[  217.864807][T15888] hsr0: left promiscuous mode
[  217.916522][   T28] audit: type=1326 audit(2000000141.920:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.2195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d10cdc799 code=0x0
[  218.450216][T15900] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  218.528846][T15900] 
@0�: renamed from bond_slave_1
[  218.856039][T15918] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2203'.
[  219.036221][T15923] hsr0: entered promiscuous mode
[  219.079365][T15923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2204'.
[  219.215532][T15923] hsr0: left promiscuous mode
[  219.752365][T15938] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  219.760346][T15938] xfrm0 speed is unknown, defaulting to 1000
[  219.776830][   T28] audit: type=1326 audit(2000000143.790:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15946 comm="syz.1.2211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe0798c799 code=0x0
[  219.806934][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'.
[  220.136085][T15958] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2215'.
[  220.190734][T15962] hsr0: entered promiscuous mode
[  220.202772][T15962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2217'.
[  220.233891][T15962] hsr0: left promiscuous mode
[  221.150213][T15984] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2226'.
[  221.954427][T15997] hsr0: entered promiscuous mode
[  221.967171][T16001] xt_hashlimit: size too large, truncated to 1048576
[  222.037487][T15996] hsr0: left promiscuous mode
[  222.208716][T16017] sock: sock_set_timeout: `syz.3.2237' (pid 16017) tries to set negative timeout
[  222.237029][   T28] audit: type=1400 audit(2000000146.230:1974): avc:  denied  { module_load } for  pid=16016 comm="syz.3.2237" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=25501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1
[  222.292787][T16022] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2239'.
[  223.204147][T16043] futex_wake_op: syz.3.2246 tries to shift op by -1; fix this program
[  224.909794][T16066] xt_hashlimit: size too large, truncated to 1048576
[  225.262131][T16078] netlink: 'syz.3.2257': attribute type 21 has an invalid length.
[  225.294537][T16078] IPv6: NLM_F_CREATE should be specified when creating new route
[  225.342962][T16078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  225.350247][T16078] IPv6: NLM_F_CREATE should be set when creating new route
[  225.357570][T16078] IPv6: NLM_F_CREATE should be set when creating new route
[  225.364782][T16078] IPv6: NLM_F_CREATE should be set when creating new route
[  225.626325][   T28] audit: type=1326 audit(2000000149.530:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16085 comm="syz.1.2253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe0798c799 code=0x0
[  225.690421][T16093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2260'.
[  225.915620][T16106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2264'.
[  225.949613][T16109] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  225.957694][T16109] xfrm0 speed is unknown, defaulting to 1000
[  226.024708][T16109] xt_recent: Unsupported userspace flags (000000b1)
[  226.114022][T16111] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  226.122165][T16111] xfrm0 speed is unknown, defaulting to 1000
[  226.387429][T16118] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  226.408520][T16120] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2267'.
[  226.889182][T16131] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  226.896908][T16131] xfrm0 speed is unknown, defaulting to 1000
[  227.341031][T16141] xt_hashlimit: size too large, truncated to 1048576
[  227.585163][T16164] hsr0: entered promiscuous mode
[  227.636696][T16164] hsr0: left promiscuous mode
[  228.025708][T16182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16182 comm=syz.5.2283
[  228.303563][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'.
[  228.543529][T16207] netlink: 'syz.0.2291': attribute type 1 has an invalid length.
[  228.571233][T16207] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.677938][T16220] hsr0: entered promiscuous mode
[  228.738244][T16219] hsr0: left promiscuous mode
[  229.364973][T16249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2305'.
[  229.508238][T16263] futex_wake_op: syz.5.2311 tries to shift op by -1; fix this program
[  229.610530][T16270] syz.0.2315 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  230.259840][   T28] audit: type=1400 audit(2000000154.270:1976): avc:  denied  { accept } for  pid=16293 comm="syz.5.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  230.448806][T16299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2324'.
[  230.486411][   T28] audit: type=1326 audit(2000000154.490:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2326" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bf6dc799 code=0x0
[  230.822294][T16311] futex_wake_op: syz.1.2328 tries to shift op by -1; fix this program
[  231.408952][T16322] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2331'.
[  231.735769][T16349] futex_wake_op: syz.0.2341 tries to shift op by -1; fix this program
[  231.821834][   T28] audit: type=1326 audit(2000000155.830:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.3.2342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[  232.064712][T16356] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  232.072370][T16356] xfrm0 speed is unknown, defaulting to 1000
[  232.998366][T16394] hsr0: entered promiscuous mode
[  233.025521][T16380] cgroup: subsys name conflicts with all
[  233.032275][T16380] netlink: 'syz.3.2353': attribute type 10 has an invalid length.
[  233.063235][T16394] hsr0: left promiscuous mode
[  233.102323][T16396] xt_hashlimit: size too large, truncated to 1048576
[  233.485472][T16418] �x9�: renamed from bridge_slave_0
[  233.528840][T16422] xt_hashlimit: size too large, truncated to 1048576
[  233.535692][T16422] xt_hashlimit: max too large, truncated to 1048576
[  233.549945][T16422] netlink: 'syz.4.2366': attribute type 5 has an invalid length.
[  233.592725][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2367'.
[  233.652697][T16426] netlink: 'syz.5.2367': attribute type 1 has an invalid length.
[  233.667935][T16426] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2367'.
[  233.711341][T16435] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2370'.
[  234.253676][T16453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2378'.
[  234.279947][T16453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2378'.
[  234.492893][T16466] pimreg3: entered allmulticast mode
[  234.894249][T16481] hsr0: entered promiscuous mode
[  234.914918][T16480] hsr0: left promiscuous mode
[  235.113148][T16497] xt_hashlimit: size too large, truncated to 1048576
[  236.395267][T16537] pimreg3: entered allmulticast mode
[  236.534614][   T28] audit: type=1326 audit(2000000160.540:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.5.2411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bf6dc799 code=0x0
[  236.877887][   T28] audit: type=1326 audit(2000000160.890:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.2418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaabfbc799 code=0x0
[  237.025571][   T28] audit: type=1400 audit(2000000161.030:1981): avc:  denied  { ioctl } for  pid=16576 comm="syz.4.2422" path="socket:[27157]" dev="sockfs" ino=27157 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  237.182333][T16590] futex_wake_op: syz.3.2426 tries to shift op by -1; fix this program
[  237.350635][T16596] netlink: 'syz.3.2429': attribute type 6 has an invalid length.
[  238.133771][   T28] audit: type=1326 audit(2000000162.140:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16629 comm="syz.4.2442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d10cdc799 code=0x0
[  238.820779][T16644] lo: entered promiscuous mode
[  238.840813][T16644] tunl0: entered promiscuous mode
[  238.848658][T16644] gre0: entered promiscuous mode
[  238.856423][T16644] gretap0: entered promiscuous mode
[  238.864023][T16644] erspan0: entered promiscuous mode
[  238.883935][T16644] ip_vti0: entered promiscuous mode
[  238.891821][T16644] ip6_vti0: entered promiscuous mode
[  238.899384][T16644] sit0: entered promiscuous mode
[  238.907178][T16644] ip6tnl0: entered promiscuous mode
[  238.914094][T16644] ip6gre0: entered promiscuous mode
[  238.924822][T16644] syz_tun: entered promiscuous mode
[  238.932058][T16644] ip6gretap0: entered promiscuous mode
[  238.954538][T16644] bridge0: entered promiscuous mode
[  238.961919][T16644] vcan0: entered promiscuous mode
[  238.969046][T16644] bond0: entered promiscuous mode
[  238.974343][T16644] bond_slave_0: entered promiscuous mode
[  238.994000][T16644] bond_slave_1: entered promiscuous mode
[  239.002968][T16644] dummy0: entered promiscuous mode
[  239.010265][T16644] nlmon0: entered promiscuous mode
[  239.027458][T16644] caif0: entered promiscuous mode
[  239.034665][T16644] batadv0: entered promiscuous mode
[  239.042351][T16644] vxcan0: entered promiscuous mode
[  239.049462][T16644] vxcan1: entered promiscuous mode
[  239.065609][T16644] veth0: entered promiscuous mode
[  239.072359][T16644] veth1: entered promiscuous mode
[  239.080064][T16644] wg0: entered promiscuous mode
[  239.088004][T16644] wg1: entered promiscuous mode
[  239.094829][T16644] wg2: entered promiscuous mode
[  239.101387][T16644] veth0_to_bridge: entered promiscuous mode
[  239.111134][T16644] bridge_slave_0: left allmulticast mode
[  239.132359][T16644] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.203737][T16644] veth1_to_bridge: entered promiscuous mode
[  239.213414][T16644] bridge_slave_1: left allmulticast mode
[  239.221788][T16644] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.256814][T16644] veth0_to_bond: entered promiscuous mode
[  239.275649][T16644] bond0: (slave bond_slave_0): Releasing backup interface
[  239.295873][T16644] veth1_to_bond: entered promiscuous mode
[  239.333478][T16644] bond0: (slave bond_slave_1): Releasing backup interface
[  239.369328][T16644] veth0_to_team: entered promiscuous mode
[  239.391332][T16644] team_slave_0: entered promiscuous mode
[  239.399070][T16644] veth1_to_team: entered promiscuous mode
[  239.407718][T16644] team_slave_1: entered promiscuous mode
[  239.415367][T16644] veth0_to_batadv: entered promiscuous mode
[  239.437075][T16644] batadv_slave_0: entered promiscuous mode
[  239.444739][T16644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.470190][T16644] veth1_to_batadv: entered promiscuous mode
[  239.478776][T16644] batadv_slave_1: entered promiscuous mode
[  239.499322][T16644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.518459][T16644] veth0_to_hsr: entered promiscuous mode
[  239.528770][T16644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  240.086894][T16658] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0
[  240.499886][T16664] netlink: 'syz.4.2454': attribute type 13 has an invalid length.
[  241.018754][T16670] futex_wake_op: syz.3.2456 tries to shift op by -1; fix this program
[  241.182575][   T28] audit: type=1400 audit(2000000165.190:1983): avc:  denied  { accept } for  pid=16668 comm="syz.3.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  241.207051][T16664] bond_slave_0: left promiscuous mode
[  241.219765][T16664] bond_slave_1: left promiscuous mode
[  241.459542][T16665] macvlan0: entered promiscuous mode
[  241.465726][T16665] macvlan0: left promiscuous mode
[  241.473593][T16669] wg1: entered promiscuous mode
[  241.480799][T16669] wg1: entered allmulticast mode
[  241.489682][ T4478] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.498846][ T4478] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  241.515456][ T4478] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.528242][ T4478] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  241.537909][ T4478] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.547254][ T4478] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  241.555970][ T4478] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.572039][ T4478] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  241.677544][   T28] audit: type=1326 audit(2000000165.690:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.4.2460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d10cdc799 code=0x0
[  241.722903][T16692] SET target dimension over the limit!
[  241.732441][T16687] 9p: Bad value for 'rfdno'
[  241.795053][T16687] rdma_rxe: rxe_newlink: failed to add xfrm0
[  242.459747][T16733] netlink: 'syz.5.2477': attribute type 3 has an invalid length.
[  242.468664][T16733] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2477'.
[  242.622241][T16740] netlink: 'syz.4.2480': attribute type 6 has an invalid length.
[  242.634509][T16740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2480'.
[  242.654957][   T28] audit: type=1400 audit(2000000166.660:1985): avc:  denied  { accept } for  pid=16739 comm="syz.4.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  243.238865][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2485'.
[  243.277005][T16759] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2487'.
[  243.299909][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'.
[  244.200823][T16792] x_tables: duplicate underflow at hook 1
[  244.272838][T16801] 9pnet_fd: Insufficient options for proto=fd
[  244.466694][   T28] audit: type=1400 audit(2000000168.480:1986): avc:  denied  { connect } for  pid=16800 comm="syz.4.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  246.070671][T16814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  246.548548][   T28] audit: type=1326 audit(2000000170.540:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.5.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf6dc799 code=0x7ffc0000
[  246.753605][   T28] audit: type=1326 audit(2000000170.550:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.5.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f06bf6dc799 code=0x7ffc0000
[  246.874121][   T28] audit: type=1326 audit(2000000170.550:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.5.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf6dc799 code=0x7ffc0000
[  246.899586][   T28] audit: type=1326 audit(2000000170.550:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.5.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f06bf6dc799 code=0x7ffc0000
[  246.923549][   T28] audit: type=1326 audit(2000000170.550:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.5.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf6dc799 code=0x7ffc0000
[  246.971719][   T28] audit: type=1326 audit(2000000170.550:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.5.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f06bf6dc799 code=0x7ffc0000
[  247.047373][   T28] audit: type=1326 audit(2000000170.550:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.5.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf6dc799 code=0x7ffc0000
[  247.107117][   T28] audit: type=1326 audit(2000000170.550:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.5.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06bf6dc799 code=0x7ffc0000
[  247.180851][T16848] futex_wake_op: syz.0.2519 tries to shift op by -1; fix this program
[  247.809127][T16870] futex_wake_op: syz.5.2527 tries to shift op by -1; fix this program
[  247.970972][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2527'.
[  247.980387][T16874] futex_wake_op: syz.1.2528 tries to shift op by -1; fix this program
[  248.081510][   T28] kauditd_printk_skb: 47 callbacks suppressed
[  248.081529][   T28] audit: type=1400 audit(2000000172.090:2042): avc:  denied  { lock } for  pid=16877 comm="syz.5.2530" path="socket:[27592]" dev="sockfs" ino=27592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  248.243137][T16885] futex_wake_op: syz.3.2532 tries to shift op by -1; fix this program
[  249.510261][   T28] audit: type=1400 audit(2000000173.520:2043): avc:  denied  { audit_write } for  pid=16920 comm="syz.3.2546" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  249.582906][   T28] audit: type=1326 audit(2000000173.590:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16936 comm="syz.1.2551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe0798c799 code=0x0
[  250.248184][T16973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=16973 comm=syz.5.2562
[  250.283379][T16973] Q�6��\b��Y�4�� speed is unknown, defaulting to 1000
[  250.290950][T16973] xfrm0 speed is unknown, defaulting to 1000
[  250.330727][T16977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16977 comm=syz.5.2562
[  250.923727][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'.
[  251.079989][   T28] audit: type=1326 audit(2000000175.090:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.4.2574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d10cdc799 code=0x0
[  251.112955][T17015] xt_hashlimit: size too large, truncated to 1048576
[  251.505401][T17037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=17037 comm=syz.5.2580
[  251.555017][T17043] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  251.932049][T17048] 9pnet: p9_errstr2errno: server reported unknown error ���n%���/
[  252.103451][T17063] netlink: 'syz.4.2588': attribute type 1 has an invalid length.
[  252.134216][T17063] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  252.151987][T17063] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  252.163834][T17063] bond3: (slave vxcan1): making interface the new active one
[  252.171780][T17063] bond3: (slave vxcan1): Enslaving as an active interface with an up link
[  252.192004][T17063] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  252.203470][T17063] bond3: (slave vxcan3): Enslaving as a backup interface with an up link
[  252.263306][T17069] bond2: option lacp_rate: invalid value (144)
[  252.284742][T17069] bond2 (unregistering): Released all slaves
[  252.420976][   T28] audit: type=1326 audit(2000000176.430:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.3.2594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effde7ac799 code=0x0
[  252.487189][T17082] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  252.714032][T17091] 9p: Bad value for 'rfdno'
[  253.091824][T17098] ==================================================================
[  253.100178][T17098] BUG: KCSAN: data-race in atime_needs_update / touch_atime
[  253.107532][T17098] 
[  253.109909][T17098] write to 0xffff88811ac6e6b8 of 4 bytes by task 17097 on cpu 1:
[  253.117674][T17098]  touch_atime+0x1d7/0x330
[  253.122137][T17098]  shmem_file_read_iter+0x477/0x540
[  253.127379][T17098]  copy_splice_read+0x471/0x6c0
[  253.132266][T17098]  splice_direct_to_actor+0x28f/0x670
[  253.137682][T17098]  do_splice_direct+0x119/0x1a0
[  253.142570][T17098]  do_sendfile+0x382/0x650
[  253.147063][T17098]  __x64_sys_sendfile64+0x105/0x150
[  253.152304][T17098]  x64_sys_call+0x2dc4/0x3020
[  253.157028][T17098]  do_syscall_64+0x12c/0x370
[  253.161635][T17098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.167577][T17098] 
[  253.169918][T17098] read to 0xffff88811ac6e6b8 of 4 bytes by task 17098 on cpu 0:
[  253.177572][T17098]  atime_needs_update+0x25f/0x3e0
[  253.182647][T17098]  touch_atime+0x4a/0x330
[  253.187027][T17098]  shmem_file_read_iter+0x477/0x540
[  253.192280][T17098]  copy_splice_read+0x471/0x6c0
[  253.197198][T17098]  splice_direct_to_actor+0x28f/0x670
[  253.202641][T17098]  do_splice_direct+0x119/0x1a0
[  253.207531][T17098]  do_sendfile+0x382/0x650
[  253.212007][T17098]  __x64_sys_sendfile64+0x105/0x150
[  253.217446][T17098]  x64_sys_call+0x2dc4/0x3020
[  253.222210][T17098]  do_syscall_64+0x12c/0x370
[  253.226829][T17098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.232760][T17098] 
[  253.235105][T17098] value changed: 0x055d574e -> 0x05f5edce
[  253.240883][T17098] 
[  253.243228][T17098] Reported by Kernel Concurrency Sanitizer on:
[  253.249422][T17098] CPU: 0 UID: 0 PID: 17098 Comm: syz.0.2598 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  253.260386][T17098] Tainted: [W]=WARN
[  253.264208][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  253.274312][T17098] ==================================================================