last executing test programs:

15m26.79494199s ago: executing program 32 (id=1370):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002000000020045007fffffff00000000", @ANYRES32=0x0, @ANYBLOB='0'], 0x50}, 0x0)

15m1.531170717s ago: executing program 33 (id=1603):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101601, 0x119)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)

14m54.17176565s ago: executing program 34 (id=2127):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)

14m53.98686177s ago: executing program 35 (id=2136):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_io_uring_setup(0x425a, &(0x7f0000000c40)={0x0, 0xcc81, 0x8, 0x0, 0x12a}, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40))

14m48.830369298s ago: executing program 36 (id=2205):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f4e5ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa2f, &(0x7f00000018c0)="$eJzs3c1vXFdfB/DvHduJH/chydOGUqK2nqQkdVvj2A5NiLooiT1JXPyCbEdqxKIpjYOiGAotSG2F1FRCrFqBBGIBu4oVq0rdUBaoGwQ7umKBhPovVKzCyujOjO2xPeNxjGO76edjzcx9+d1zfnfuy/HM3JkTflxWjm8YW1mp33Y5fvMf9yFjDrGrk99/+dUX5e2zBzmSnrxe/FPSn6Sa9CZ5LumbmJyfm+lS0P3kdpJvkyLJ0TQed+R2ir/Mz9fHv03x92W9HR3Zacl0s8JP2kHvfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBgVE5Ojo2PFkUzN3ny72pBUt5iYnJ8rsrKydc7qMg3f1Hv9Lr7pWm9SlLf096929f3cyfXZzyapnsnzjbHn6x2Spz+fPPXsiTee6a2sLt8pm/+Xozsv9sOPP7n/7vLy0gdt5xbFHmZ1yDT2keu12amFuamZK9dr1amFuerlixdHz9+4tlC9NjVdW7i1sFibqU7M164szs1XhyZeqY5dvnyhWhu5NXdz9vrkyHRtdeKlXx8fHb1YfWvkd2pX5hfmZs+/NbIwcWNqenpq9no9ppxdxlwqd8TfnlqsLtauzFSrd+8tL13YlFlPNu2/ZdBYt/Upg8a7BY2Pjo+PjY2Pj33W7D17bcLF1y+/fml0tHd0k2yJeEw7LYfLzzpv5r0/icMuVRrtfzKdqczmZt5Ote3fRCYzn7nMdJjftNr+nz1f27batLT/zVa+t2X+qfLuTF5sjvZ3aP875LJ/fx/m43yS+3k3y1nOUj448Iz29+96apnNVBYyl6nM5Ep9SrU5pZrLuZiLGc07uZHBLKQ31zKV6dSykFtZyGJq9T1qIvOp5UoWM5f5VDOUibySasZyOZdzIdXUMpJbmcvNzOZ6JnOlXsrd3Ks/7xe2yXEtaGwnQePbBG1pzB+5/a9t/ueEJ1Bl2638GM7isDsrzfb/SPfQoYn9SAgAAADYc7/67zl28ul/+++kyAv1z+WvTU3XRg86LQAAAGAP1S/Xe7586CuHXkjh9T8AAAA8aYr6d+yKJAMZbAytfhPKmwAAAADwhKh//v9iisH1CV7/AwAAwBOm+2/sd40ohld//rd6p/F4pxnRGCsGrk1N10Ym5qbfGMu5+q8M1L9psKW0nqToq3/94NWcbkSdHmg8DqyXWNbZX0aNjbwxlldzprkiQy+VDy8NtYkcb0S+3Ih8uTWyJxsiL5SRAPCkO7NNe7zT9v/VDDcihk/Vm/zeUxva4J56yzqqZQWAw2Ktj53/bXZp1qb9b0a82Kn9/41tXv+XEU/n7mDjkoKRvJf3s5w7GU7zioPBdqWu9kbQuAxhuMu7AQPNSxa+u1TJ8Jb3A/rX1rU1dinjGW77jkBLucVqDhcacT2PZxsAwH47s207vNb+927X/g9v//q/pc11SSEAHAZrPdg/6sDgzoMPeh0BgI200gAAAAAAAAAAAAAAAAAAAAAAAAAAALD3dvQD/v9xLlleXkp221lAm4Hv/vWff6ljzOdPJf2PkuH2A5XsTc6Hf6AnyUHV/mYeealyGx+Wp87AxoEDPjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwL4qkp930SnI0yWiS8/uf1ePz4KAT2CvV3S1WPMzDfJRje50OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBPXfP3/ytpPD7VmJTeSnI2ye0kv3vQOT6K/i7zH+5THofPH9TvW37/v5L0ZaVIb2Ozp+ibmJyfmyl3heJoOf/7L7/6orx1LPLT1YGtvSqUBZQ1bOhcollDy5S+jUv9or7UwOTSh/f/5P0/qk5ere+YVxevTU/OXJ//rfXAZ4uvG10gtHaDsJrvn539l79qmXykWfnX5Zq2t7nea/V6J7fW+yvtlu5Q7w7cW14aL2tarL29+Kd/WGmd9XROJy8NJUMba/r98tahptObn8+Nih+KvyiO5W9zu779y2ejWCnKTXS8vv4/u3tveWnkvfeX76zl9Om9j1oKOJHBJHc2HmVdchqsn0/aqu91lb6y1tF6UHl3skt522opcWz9ed2wDr+o7zIDj7QO1c7rUNfleW9mdGFzRivlQfLXf/xMzm27pY+2KfFclxrbKn4o/qu4kf/Mn7f0/1Ept//ZtD062xRRj2zZU1rnbTi8KmfX13y8dcY7m8vseFTyGHye38tvrm3/Ssv5v7mtOhw3a+ejN1smdjhuVg+tbY6Llhq3HBdN3Y6LrUfqPxzf0qKsqx9GJze1SM2zT6dlmnmebER1yPOX81rSe+qRziivdTmjdFt+t8f/3xVD+Z880P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+BVJT7vpleRskhNJjpfj1WRlc8yDXdRXGSh2k+ae2U3OPz5FxxUtHuZhPsqx/c4IAAAAAAAAgMfj6uT3X371RXmrfx7fk1+rNOdUk94kJ4q/6ZuYnJ+b6VJQX3J79SP9/vYhHSbndnn38/Xxb8ux57rUd7CXDwDAj9r/BQAA//+CGm1g")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

14m48.460777618s ago: executing program 37 (id=2221):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}}], 0x2, 0x0)

14m47.203194073s ago: executing program 38 (id=2235):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x8800000, 0x0, 0x3)

14m46.267426962s ago: executing program 39 (id=2243):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)

14m22.635761264s ago: executing program 40 (id=2376):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000280)='./file0\x00')
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

13m55.597763672s ago: executing program 41 (id=2718):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x2)
fdatasync(r0)

13m43.081798605s ago: executing program 42 (id=3099):
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

13m35.625668904s ago: executing program 43 (id=3196):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)

13m7.472394481s ago: executing program 44 (id=3998):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

12m44.511932657s ago: executing program 45 (id=4179):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12m10.912725998s ago: executing program 46 (id=5069):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x9, 0x8, 0x0)

10m29.629087257s ago: executing program 47 (id=7478):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000000)

10m14.371183012s ago: executing program 48 (id=7917):
ptrace(0x10, 0x1)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0)

9m50.459314378s ago: executing program 49 (id=8736):
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20)

9m43.148342449s ago: executing program 50 (id=8873):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xfe74, 0x10000, 0x3, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000))
io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000003c0)={0x0}, 0x1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0xcc}, 0x0)

9m42.1752526s ago: executing program 51 (id=8887):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x800000f3d, 0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)

9m36.675485306s ago: executing program 52 (id=9028):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c0000800800034000000002"], 0x100}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)

9m22.569807012s ago: executing program 53 (id=9405):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x14)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unshare(0x4020400)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20)

9m3.276838197s ago: executing program 54 (id=9938):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001)
r2 = getpgid(0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2})
sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015)

8m38.318556868s ago: executing program 55 (id=10567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4157d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000002)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0x4}, {0xfff1, 0xfff2}, {0xffe0, 0xfff3}}}, 0x24}}, 0x40000)

7m57.137006584s ago: executing program 56 (id=10954):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r1=>0x0})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x24a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x3, 0x4d}, 0x90)
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0xf0, 0x1}, 0xfd}, 0x18)
writev(r0, &(0x7f0000000180), 0x20000000000000c5)

7m56.330890176s ago: executing program 57 (id=10972):
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
brk(0x200004ffc000)

7m51.883564468s ago: executing program 58 (id=10995):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000266000/0x2000)=nil, 0x2000, &(0x7f0000000a40)=""/70)

6m11.023911804s ago: executing program 59 (id=13601):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000005c0))

5m31.95646267s ago: executing program 60 (id=14480):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)

5m10.499302018s ago: executing program 61 (id=14947):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0)

3m5.139071237s ago: executing program 62 (id=17630):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r3, r2, 0x0, 0x100000002)

2m16.355550468s ago: executing program 63 (id=18573):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = timerfd_create(0x0, 0x80000)
read(r1, &(0x7f0000001080)=""/4096, 0x1000)

2m1.828163545s ago: executing program 9 (id=18629):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b7}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m1.638019395s ago: executing program 9 (id=18630):
r0 = getpid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/153, 0x99}], 0x1, &(0x7f0000000ac0)=[{0x0}], 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)

2m1.14040853s ago: executing program 9 (id=18643):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

2m0.892501253s ago: executing program 9 (id=18654):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")

2m0.785627139s ago: executing program 9 (id=18657):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'macsec0\x00', 0x600})

1m59.193642212s ago: executing program 9 (id=18693):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe)

1m59.120722075s ago: executing program 64 (id=18693):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe)

1m19.049004533s ago: executing program 6 (id=19414):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x80000001, @empty}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10)
listen(r0, 0x80005)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001080)="42ec6c47ba0e0db80258de8ff2d341c90000567f87589b38d002fbd900640000000000", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001140)="2837cb92a8de748fb7d08897ec772ec8e9d600aaed0d9be1b928e35421eb7b7c917b8f", 0x23}], 0x1}}], 0x2, 0x44051)
close_range(r0, 0xffffffffffffffff, 0x0)

1m18.178586118s ago: executing program 6 (id=19424):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
bind$unix(r1, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(r1, 0xa)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
close_range(r0, 0xffffffffffffffff, 0x0)

1m18.14794685s ago: executing program 6 (id=19425):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m15.715739257s ago: executing program 6 (id=19431):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)

1m15.705608377s ago: executing program 6 (id=19433):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x6, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28)
r1 = socket$unix(0x1, 0x2, 0x0)
poll(&(0x7f00000001c0)=[{r0, 0x80}, {r1, 0x66a82e75a9f64937}], 0x2, 0x40c)

1m15.411765322s ago: executing program 6 (id=19441):
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x21, 0x4bd, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, 0x0, 0x441, 0x104)
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, r2)

1m15.411617412s ago: executing program 65 (id=19441):
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x21, 0x4bd, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, 0x0, 0x441, 0x104)
lchown(&(0x7f00000001c0)='./file0\x00', 0x0, r2)

1m7.945960841s ago: executing program 0 (id=19536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0)

1m7.823782678s ago: executing program 0 (id=19537):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(r0, 0xb5d6)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)

1m7.817806158s ago: executing program 0 (id=19538):
syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

1m7.691478204s ago: executing program 0 (id=19550):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

1m7.665524076s ago: executing program 0 (id=19540):
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m7.560336591s ago: executing program 0 (id=19542):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)

1m7.541449412s ago: executing program 66 (id=19542):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)

46.293112209s ago: executing program 4 (id=19839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppoe(0x18, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x288, 0x288, 0xfeffffff, 0x288, 0x1e0, 0x340, 0x340, 0xffffffff, 0x340, 0xf8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x0, 'veth0_to_bridge\x00', 'pimreg1\x00', {}, {}, 0x4, 0x3}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@inet=@length={{0x28}, {0xec, 0x4}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010100, @empty, @gre_key=0x6, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key, @gre_key=0x8001}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0xffffffff, 'lo\x00', 'erspan0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1b, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv4=@dev={0xac, 0x14, 0x14, 0xff}, @port, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xa0c89f, 0x1c881, 0x1, 0xd1})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x40044)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

46.123668317s ago: executing program 4 (id=19832):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20)

46.08967093s ago: executing program 4 (id=19833):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xd3283d036be269b7, 0x13, r0, 0x1777f000)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)

46.034488652s ago: executing program 4 (id=19835):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
r0 = creat(0x0, 0x28)
close(r0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

45.945072667s ago: executing program 4 (id=19836):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x4, 0xfffffffffffffffd, 0x544}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

45.50524167s ago: executing program 4 (id=19845):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185)
r1 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

45.463621592s ago: executing program 67 (id=19845):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185)
r1 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

34.319672232s ago: executing program 5 (id=20016):
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = syz_clone(0x11, 0x0, 0xfffffd2f, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x3f, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

34.233314077s ago: executing program 5 (id=20019):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

34.178085269s ago: executing program 5 (id=20020):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x200, 0x200, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@loopback, @empty, 0xff, 0xffffffff, 0x2, 0x5, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="140516db5051", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x81, 0x7, 0xac04, 0x3, 0x7, 0x8, 'nr0\x00', 'veth1_macvtap\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0xffffffff, 0x80000001, 0x2}}}, {{@arp={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 0x10, 0x10, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x0, 0x7, 0xff, 0x6d, 0x2, 0x9, 'dummy0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, 0x0, 0xff000000, 0x1, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x4, 0x8d, 0x3, 0x6, 0xbdea, 'sit0\x00', 'wlan1\x00', {}, {}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="de61bd872db6", @mac=@local, @multicast1, @multicast2, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448)

33.652136398s ago: executing program 5 (id=20026):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0)
r0 = open$dir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x78)
open_tree(r0, &(0x7f0000000300)='./file0/../file0\x00', 0x8801)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

33.543347503s ago: executing program 5 (id=20029):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x86)
fchdir(r1)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
brk(0x20000005b000)
brk(0x200000ffc000)

32.907586776s ago: executing program 5 (id=20036):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @remote, @multicast2}, 0x0)

32.874543308s ago: executing program 68 (id=20036):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @remote, @multicast2}, 0x0)

3.147424316s ago: executing program 7 (id=20439):
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r0 = semget$private(0x0, 0x1, 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x7])
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x43, 0x1000}], 0x1, 0x0)

3.06536632s ago: executing program 7 (id=20440):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x800f0, 0xd218)
timerfd_create(0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/43, 0x2b, 0x730)
syz_open_dev$usbmon(0x0, 0x3, 0x565000)
socket$inet_sctp(0x2, 0x1, 0x84)

2.979917035s ago: executing program 7 (id=20442):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendto(r0, &(0x7f0000000740)="120000", 0x3, 0x0, 0x0, 0x0)

2.618030224s ago: executing program 2 (id=20448):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x4242, 0xb02d, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48)

1.884976492s ago: executing program 7 (id=20455):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.813660036s ago: executing program 2 (id=20456):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880)

1.709577241s ago: executing program 1 (id=20460):
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x6, 0x6fc}], 0x0)

1.709009171s ago: executing program 2 (id=20461):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0)
syz_emit_ethernet(0x74, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
sendto$inet6(r0, &(0x7f0000000100)='0', 0x12, 0x0, 0x0, 0x0)

1.703427902s ago: executing program 3 (id=20462):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c004)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, 0x0, 0x4040400)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
close(0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x490, 0x0, 0x0, 0xffffff6a, 0x200, 0x0, 0x3c0, 0x258, 0x258, 0x3c0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x198, 0x200, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffff00, 0xff000000, 0xff, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, [0xffffffff, 0xff000000, 0x0, 0xff000000], @ipv6=@mcast1, [0x0, 0xffffffff, 0xff000000, 0xffffffff], @ipv4=@remote, [0xff, 0xffffff00, 0xffffff00], 0x4, 0x1180000, 0x67, 0x4e23, 0x4e21, 0x4e24, 0x4e23, 0x40, 0x80}, 0x80, 0x2009}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)

1.645004905s ago: executing program 7 (id=20463):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @local, 0x3b67}, 0x1c)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8848)
setresuid(0x0, 0x0, 0x0)
set_mempolicy(0x2, 0x0, 0x4)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

1.636643685s ago: executing program 2 (id=20464):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

1.595767507s ago: executing program 1 (id=20474):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0xfffffffe, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")
mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0)

1.594670067s ago: executing program 3 (id=20465):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pause()
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000))

1.553157889s ago: executing program 1 (id=20466):
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
close(0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x88c0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0xa7, @tick=0x9})

1.501485282s ago: executing program 1 (id=20467):
timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r2, 0x7)
close_range(r1, 0xffffffffffffffff, 0x0)
setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0)

1.282070003s ago: executing program 8 (id=20470):
r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x9)
fchdir(r1)
open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190)
r2 = inotify_init1(0x80000)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
getdents64(r3, &(0x7f0000001940)=""/4096, 0x1000)

1.195399048s ago: executing program 8 (id=20471):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r3, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x24040000)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0xac1e0001}})

1.071783934s ago: executing program 8 (id=20472):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0x3)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
writev(r0, &(0x7f0000001680)=[{&(0x7f0000000640)='n', 0x1}, {0x0}], 0x2)

1.063996134s ago: executing program 8 (id=20473):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffff927, 0x101}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = eventfd2(0x74a6, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1)

838.979386ms ago: executing program 2 (id=20475):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48814}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

731.042662ms ago: executing program 3 (id=20476):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52)

599.980909ms ago: executing program 1 (id=20477):
socket(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
close(0x4)

503.795954ms ago: executing program 3 (id=20478):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

461.135866ms ago: executing program 1 (id=20479):
ioperm(0x7, 0x81, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ftruncate(r0, 0x8800000)
r1 = gettid()
timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff})
sendfile(r2, r0, 0x0, 0x578410eb)
sendfile(r2, r0, 0x0, 0x100000000)

415.250819ms ago: executing program 7 (id=20480):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x8, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xf, 0x800}, 0x2, 0x100, 0x800004, 0x6, 0x2, 0xd0, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, r1, 0x1)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

399.696209ms ago: executing program 2 (id=20481):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

114.911494ms ago: executing program 3 (id=20482):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet6_sctp(0xa, 0x5, 0x84)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={<r3=>0xffffffffffffffff, 0x8e59, 0x0, 0x20000003})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close_range(r3, r1, 0x0)

82.380536ms ago: executing program 8 (id=20483):
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
r1 = socket$inet6(0xa, 0x5, 0x0)
close(0x3)
socket(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='0'], 0x30, 0x180}], 0x1, 0x0)

34.661098ms ago: executing program 8 (id=20484):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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")
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x8000000000000001, 0x0, 0x7})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000)
fallocate(r0, 0x0, 0x0, 0x8800000)
io_setup(0x1, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)

0s ago: executing program 3 (id=20485):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a", 0x2d, 0x8012, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

kernel console output (not intermixed with test programs):

.738455][T27539] geneve2: left allmulticast mode
[  909.775749][T27547] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.783692][T27547] 8021q: adding VLAN 0 to HW filter on device team0
[  909.808359][T27563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19019'.
[  909.868701][T27547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  909.890713][T17456] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  909.908800][T17456] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  909.922594][T17458] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  909.937953][T17458] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  909.969795][T17458] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  909.992198][T17458] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  910.023266][T17458] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  910.033568][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19021'.
[  910.046989][T17458] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  910.057234][ T3416] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  910.081891][T17458] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  910.103760][T17458] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  910.117626][T27567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19021'.
[  910.194291][   T28] audit: type=1400 audit(2000001667.586:18755): avc:  denied  { link } for  pid=27584 comm="syz.0.19029" name="file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  910.255670][T27590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19031'.
[  910.392096][T17458] nci: nci_ntf_packet: unknown ntf opcode 0x26
[  910.864215][T27611] netlink: 'syz.6.19037': attribute type 1 has an invalid length.
[  910.890588][T27611] bond7: entered promiscuous mode
[  910.902665][T27611] 8021q: adding VLAN 0 to HW filter on device bond7
[  910.921197][T27611] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  910.972483][T27611] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  910.996978][T27611] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  911.024145][T27611] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  911.165606][T27601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  911.225412][   T28] audit: type=1326 audit(2000001668.636:18756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27623 comm="syz.1.19053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f025714c819 code=0x0
[  911.297783][T27636] netlink: 'syz.3.19036': attribute type 27 has an invalid length.
[  911.313023][T27636] ip6gre1: left promiscuous mode
[  911.323036][T27636] ip6gre1: left allmulticast mode
[  911.328316][T27636] hsr0: left promiscuous mode
[  911.333674][T27636] team1: left promiscuous mode
[  911.348304][T27636] team1: left allmulticast mode
[  911.358496][T27636] bond3: left promiscuous mode
[  911.366327][T27636] bond4: left promiscuous mode
[  911.371994][T27636] gtp0: left promiscuous mode
[  911.377207][T27636] team2: left promiscuous mode
[  911.382185][T27636] team2: left allmulticast mode
[  911.387333][T27636] bond6: left promiscuous mode
[  911.418448][T27636] bond6: left allmulticast mode
[  911.423995][T27636] hsr1: left promiscuous mode
[  911.517091][T27640] 8021q: adding VLAN 0 to HW filter on device team0
[  911.554685][T27640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  911.602766][T27661] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19056'.
[  911.612926][T17102] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  911.639836][T16423] kmmpd-loop6: attempt to access beyond end of device
[  911.639836][T16423] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[  911.658845][T17454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  911.664762][T16423] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[  911.689169][T27669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19058'.
[  912.110903][T27700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19069'.
[  912.165502][T27703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19072'.
[  912.183181][T27705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19070'.
[  912.238834][T17102] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  912.678820][T17454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  913.560962][ T6282] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  913.560978][ T6282] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  913.959797][T27758] 9p: Bad value for 'rfdno'
[  914.050763][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  916.498142][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  916.667661][T27788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19106'.
[  916.683331][T16423] kmmpd-loop6: attempt to access beyond end of device
[  916.683331][T16423] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[  916.720975][T27788] bond8: entered promiscuous mode
[  916.744403][T16423] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[  916.761586][T27788] 8021q: adding VLAN 0 to HW filter on device bond8
[  916.842785][T27794] bridge3: entered promiscuous mode
[  916.863009][T27794] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  916.983064][T27795] bond8: left promiscuous mode
[  916.990190][T27795] bridge3: left promiscuous mode
[  916.995432][T27795] bond8: entered allmulticast mode
[  917.001179][T27795] bridge3: entered allmulticast mode
[  917.384883][T27833] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19125'.
[  917.434857][T27833] bond8: entered promiscuous mode
[  917.449361][T27833] 8021q: adding VLAN 0 to HW filter on device bond8
[  917.512915][T27837] bridge4: entered promiscuous mode
[  917.531408][T27837] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  917.594741][T27833] bond8: left promiscuous mode
[  917.608832][T27833] bridge4: left promiscuous mode
[  917.622625][T27833] bond8: entered allmulticast mode
[  917.638640][T27833] bridge4: entered allmulticast mode
[  917.656177][   T28] audit: type=1326 audit(2000001675.066:18757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  917.718585][   T28] audit: type=1326 audit(2000001675.066:18758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  917.788506][   T28] audit: type=1326 audit(2000001675.066:18759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  917.828550][T27844] netlink: 'syz.8.19129': attribute type 27 has an invalid length.
[  917.855577][T27844] wg1: left promiscuous mode
[  917.859651][   T28] audit: type=1326 audit(2000001675.066:18760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  917.863787][T27844] wg1: left allmulticast mode
[  917.922500][   T28] audit: type=1326 audit(2000001675.066:18761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  917.949640][T27844] ip6tnl2: left promiscuous mode
[  917.966437][T27844] ip6tnl2: left allmulticast mode
[  917.976871][   T28] audit: type=1326 audit(2000001675.066:18762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  917.984192][T27844] bond1: left promiscuous mode
[  918.028658][   T28] audit: type=1326 audit(2000001675.066:18763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  918.062889][T27844] bond2: left promiscuous mode
[  918.085283][T27844] macvtap1: left promiscuous mode
[  918.098879][T27844] ip6gretap2: left allmulticast mode
[  918.112061][   T28] audit: type=1326 audit(2000001675.066:18764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  918.133718][T27844] geneve3: left promiscuous mode
[  918.143184][T27844] geneve3: left allmulticast mode
[  918.144081][   T28] audit: type=1326 audit(2000001675.076:18765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  918.153405][T27844] ip6gretap3: left allmulticast mode
[  918.172380][   T28] audit: type=1326 audit(2000001675.076:18766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27839 comm="syz.0.19127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fca1c819 code=0x7ffc0000
[  918.202223][T27844] bond7: left promiscuous mode
[  918.206995][T27844] vcan0: left promiscuous mode
[  918.216520][T27844] bond8: left allmulticast mode
[  918.221724][T27844] bridge4: left allmulticast mode
[  918.261886][T27853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  918.283650][ T6282] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  918.307126][T17458] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  918.322749][T17458] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  918.344529][T17458] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  918.368642][T17458] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  918.566992][T27885] netlink: 'syz.3.19144': attribute type 4 has an invalid length.
[  918.601977][T27885] netlink: 'syz.3.19144': attribute type 4 has an invalid length.
[  918.706116][T27895] netlink: 'syz.1.19149': attribute type 27 has an invalid length.
[  918.789679][T27898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19148'.
[  918.814586][T27906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19151'.
[  918.835831][T27908] tmpfs: Bad value for 'size'
[  918.842014][T27895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  918.892078][T28475] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  919.062523][T27930] netlink: 'syz.6.19162': attribute type 4 has an invalid length.
[  919.075963][T27930] netlink: 'syz.6.19162': attribute type 4 has an invalid length.
[  919.205986][T27940] netlink: 164 bytes leftover after parsing attributes in process `syz.8.19165'.
[  919.238647][T17436] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  919.571657][T27900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  919.846443][T27983] netlink: 64 bytes leftover after parsing attributes in process `syz.8.19183'.
[  920.313397][T17436] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  920.322611][T17436] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  920.628594][T17094] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  920.854279][T28019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  920.866983][T28014] SELinux: failed to load policy
[  920.916636][T28026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.925046][T28026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  920.933811][T28026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.947450][T28026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  920.964729][T28026] netlink: 'syz.0.19202': attribute type 1 has an invalid length.
[  920.972861][T28026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19202'.
[  920.991253][T28031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19203'.
[  921.188742][T28019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  921.528622][T28019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  921.686203][T28019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  921.687062][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19229'.
[  921.722584][T16423] kmmpd-loop6: attempt to access beyond end of device
[  921.722584][T16423] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[  921.758651][T16423] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[  922.302934][T28100] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19232'.
[  922.694107][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  922.694122][   T28] audit: type=1400 audit(2000001680.106:18784): avc:  denied  { connect } for  pid=28105 comm="syz.1.19235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  923.698278][T28145] netlink: 'syz.8.19250': attribute type 4 has an invalid length.
[  924.128554][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  924.803423][T28174] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19261'.
[  925.085981][T28191] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19269'.
[  925.170624][T28195] bond7: entered allmulticast mode
[  925.181968][T28195] vcan0: entered allmulticast mode
[  925.348538][   T28] audit: type=1400 audit(2000001682.756:18785): avc:  denied  { ioctl } for  pid=28215 comm="syz.6.19282" path="socket:[182756]" dev="sockfs" ino=182756 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  925.402045][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19283'.
[  925.454176][T28219] bond7: (slave vcan0): Releasing backup interface
[  925.467435][T28219] vcan0 (unregistering): left allmulticast mode
[  925.672484][T28219] bond7: Destroying bond
[  925.677921][T28219] bond7 (unregistering): left allmulticast mode
[  925.698200][T28219] bond7 (unregistering): Released all slaves
[  925.763834][T28238] netlink: 'syz.6.19290': attribute type 1 has an invalid length.
[  925.911129][T28252] netlink: 'syz.8.19296': attribute type 3 has an invalid length.
[  925.928113][T28252] netlink: 'syz.8.19296': attribute type 7 has an invalid length.
[  925.938891][T28252] netlink: 198320 bytes leftover after parsing attributes in process `syz.8.19296'.
[  925.968724][T28274] netlink: 'syz.6.19305': attribute type 30 has an invalid length.
[  925.976637][T28274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19305'.
[  926.023337][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19306'.
[  926.026670][T28284] netlink: 'syz.6.19305': attribute type 30 has an invalid length.
[  926.054909][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19305'.
[  926.758602][T16423] kmmpd-loop6: attempt to access beyond end of device
[  926.758602][T16423] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[  926.787548][T16423] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[  926.816827][T28336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19323'.
[  926.835852][T28336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19323'.
[  926.884413][T28344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19327'.
[  927.278628][T28372] 8021q: adding VLAN 0 to HW filter on device bond0
[  927.286671][T28372] 8021q: adding VLAN 0 to HW filter on device team0
[  927.296079][T28372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  927.368831][T28476] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  927.428777][T28476] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  927.462290][T28381] netlink: 'syz.6.19342': attribute type 1 has an invalid length.
[  927.477468][T28381] bond9: entered promiscuous mode
[  927.488989][T28381] bond9: entered allmulticast mode
[  927.502859][T28381] 8021q: adding VLAN 0 to HW filter on device bond9
[  927.525649][T28381] macvlan3: entered promiscuous mode
[  927.535500][T28381] macvlan3: entered allmulticast mode
[  927.543630][T28381] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  927.738702][T28407] netlink: 32 bytes leftover after parsing attributes in process `syz.6.19351'.
[  928.198745][T17436] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  928.288802][T28443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19366'.
[  928.518761][T28459] netlink: 'syz.3.19373': attribute type 1 has an invalid length.
[  928.786358][T28473] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.19379'.
[  928.920946][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19381'.
[  929.200125][T28500] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19388'.
[  929.252628][T17423] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  929.266674][T17423] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  929.309810][ T3429] delete_channel: no stack
[  929.461537][T28476] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  929.791900][T28539] xt_hashlimit: size too large, truncated to 1048576
[  930.307030][T28561] syzkaller0: entered promiscuous mode
[  930.312729][T28561] syzkaller0: entered allmulticast mode
[  930.628572][T28577] bridge_slave_1: left allmulticast mode
[  930.634308][T28577] bridge_slave_1: left promiscuous mode
[  930.640238][T28577] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.651807][T28577] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  931.798592][T16423] kmmpd-loop6: attempt to access beyond end of device
[  931.798592][T16423] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[  931.819040][T16423] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[  932.119408][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  933.398627][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  933.825058][T24756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.839166][T16423] kmmpd-loop6: attempt to access beyond end of device
[  933.839166][T16423] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64
[  933.860939][T16423] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[  934.240043][T28633] chnl_net:caif_netlink_parms(): no params data found
[  934.281915][T28633] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.289126][T28633] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.296273][T28633] bridge_slave_0: entered allmulticast mode
[  934.302838][T28633] bridge_slave_0: entered promiscuous mode
[  934.309792][T28633] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.316977][T28633] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.324653][T28633] bridge_slave_1: entered allmulticast mode
[  934.331342][T28633] bridge_slave_1: entered promiscuous mode
[  934.350206][T28633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  934.364870][T28633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  934.385404][T28633] team0: Port device team_slave_0 added
[  934.392349][T28633] team0: Port device team_slave_1 added
[  934.409038][T28633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.416005][T28633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.442397][T28633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.453781][T28633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  934.460785][T28633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.486884][T28633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  934.514879][T28633] hsr_slave_0: entered promiscuous mode
[  934.521228][T28633] hsr_slave_1: entered promiscuous mode
[  934.527091][T28633] debugfs: 'hsr0' already exists in 'hsr'
[  934.532911][T28633] Cannot create hsr debugfs directory
[  934.625198][T28633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  937.608182][T28633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  937.856939][T28633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  937.921273][T28633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  938.012680][T28633] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  938.029570][T28633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  938.038139][T28633] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  938.056510][T28633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  938.069036][T28633] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  938.080702][T28633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  938.091664][T28633] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  938.114544][T28633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  938.182552][T28633] 8021q: adding VLAN 0 to HW filter on device bond0
[  938.203687][T28633] 8021q: adding VLAN 0 to HW filter on device team0
[  938.227298][T17456] bridge0: port 1(bridge_slave_0) entered blocking state
[  938.234752][T17456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  938.273767][T17456] bridge0: port 2(bridge_slave_1) entered blocking state
[  938.281297][T17456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  938.325867][T28723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19467'.
[  938.355077][   T28] audit: type=1400 audit(2000001695.766:18786): avc:  denied  { add_name } for  pid=28726 comm="syz.0.19469" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  938.382244][   T28] audit: type=1400 audit(2000001695.766:18787): avc:  denied  { create } for  pid=28726 comm="syz.0.19469" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1
[  938.416306][   T28] audit: type=1400 audit(2000001695.826:18788): avc:  denied  { read } for  pid=28729 comm="syz.0.19470" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  938.499520][   T28] audit: type=1400 audit(2000001695.856:18789): avc:  denied  { open } for  pid=28729 comm="syz.0.19470" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  938.582527][   T28] audit: type=1326 audit(2000001695.936:18790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.3.19471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  938.606195][   T28] audit: type=1326 audit(2000001695.936:18791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.3.19471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  938.630414][T28633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  938.718702][   T28] audit: type=1326 audit(2000001695.936:18792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.3.19471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  938.763461][T28633] veth0_vlan: entered promiscuous mode
[  938.777365][T28749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19474'.
[  938.786389][   T28] audit: type=1326 audit(2000001695.936:18793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.3.19471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  938.815182][T28633] veth1_vlan: entered promiscuous mode
[  938.855044][   T28] audit: type=1326 audit(2000001695.936:18794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.3.19471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  938.884083][T28633] veth0_macvtap: entered promiscuous mode
[  938.909982][T28633] veth1_macvtap: entered promiscuous mode
[  938.929048][   T28] audit: type=1326 audit(2000001695.936:18795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.3.19471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  938.954686][T28633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  938.963883][T28633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  938.980615][T17456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  938.989397][T17456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  938.998102][T17456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  939.013174][T28759] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19478'.
[  939.023793][T17456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  939.076972][T28759] netlink: 16 bytes leftover after parsing attributes in process `syz.8.19478'.
[  939.091150][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19478'.
[  939.484005][T28805] netlink: 'syz.2.19494': attribute type 8 has an invalid length.
[  939.492425][T28805] netlink: 'syz.2.19494': attribute type 7 has an invalid length.
[  939.500750][T28805] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.19494'.
[  939.646581][T28810] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19496'.
[  939.947208][T28817] xt_hashlimit: size too large, truncated to 1048576
[  940.689805][T28882] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19524'.
[  941.076517][T28895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19530'.
[  942.112864][T28884] kexec: Could not allocate control_code_buffer
[  942.316267][T28926] chnl_net:caif_netlink_parms(): no params data found
[  942.389532][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  942.474178][T28926] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.481269][T28926] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.488385][T28926] bridge_slave_0: entered allmulticast mode
[  942.494951][T28926] bridge_slave_0: entered promiscuous mode
[  942.501734][T28926] bridge0: port 2(bridge_slave_1) entered blocking state
[  942.508843][T28926] bridge0: port 2(bridge_slave_1) entered disabled state
[  942.523909][T28926] bridge_slave_1: entered allmulticast mode
[  942.531803][T28926] bridge_slave_1: entered promiscuous mode
[  942.555299][T28926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  942.567229][T28926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  942.593113][T28926] team0: Port device team_slave_0 added
[  942.600742][T28926] team0: Port device team_slave_1 added
[  942.621335][T28926] batman_adv: batadv0: Adding interface: batadv_slave_0
[  942.649965][T28926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  942.686185][T28926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  942.698374][T28926] batman_adv: batadv0: Adding interface: batadv_slave_1
[  942.709274][T28926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  942.737436][T28926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  942.803042][T17454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.857837][T28926] hsr_slave_0: entered promiscuous mode
[  942.873661][T28926] hsr_slave_1: entered promiscuous mode
[  942.879816][T28952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19552'.
[  942.893574][T28926] debugfs: 'hsr0' already exists in 'hsr'
[  942.907404][T28926] Cannot create hsr debugfs directory
[  943.447862][T28955] chnl_net:caif_netlink_parms(): no params data found
[  943.557425][T28955] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.565633][T28955] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.573565][T28955] bridge_slave_0: entered allmulticast mode
[  943.580780][T28955] bridge_slave_0: entered promiscuous mode
[  943.588171][T28955] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.595682][T28955] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.603421][T28955] bridge_slave_1: entered allmulticast mode
[  943.610493][T28955] bridge_slave_1: entered promiscuous mode
[  943.675801][T28955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  943.713248][T17454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.741137][T28955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  943.789018][T17454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.853575][T28955] team0: Port device team_slave_0 added
[  943.884136][T17454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.899639][T29022] xt_hashlimit: size too large, truncated to 1048576
[  943.913679][T28955] team0: Port device team_slave_1 added
[  943.937918][T28926] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  943.956002][T28926] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  943.975115][T28926] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  943.986860][T28926] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  944.017299][T28926] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  944.030813][T28926] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  944.048692][T28926] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  944.063061][T28926] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  944.079306][T28955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  944.087962][T28955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  944.148796][T28955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  944.176717][T28955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  944.190512][T28955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  944.224813][T28955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  944.313857][T28955] hsr_slave_0: entered promiscuous mode
[  944.320923][T28955] hsr_slave_1: entered promiscuous mode
[  944.327044][T28955] debugfs: 'hsr0' already exists in 'hsr'
[  944.333108][T28955] Cannot create hsr debugfs directory
[  944.374826][T17454] bridge_slave_1: left allmulticast mode
[  944.380865][T17454] bridge_slave_1: left promiscuous mode
[  944.387059][T17454] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.398422][T17454] bridge_slave_0: left allmulticast mode
[  944.405170][T17454] bridge_slave_0: left promiscuous mode
[  944.411430][T17454] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.601806][T17454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  944.611994][T17454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  944.622262][T17454] bond0 (unregistering): Released all slaves
[  944.676902][T29080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19571'.
[  944.696315][T17454] hsr_slave_0: left promiscuous mode
[  944.718715][T17454] hsr_slave_1: left promiscuous mode
[  944.731108][T17454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  944.739165][T17454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  944.748449][T17454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  944.762382][T17454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  944.783859][T17454] veth1_macvtap: left promiscuous mode
[  944.785273][   T28] kauditd_printk_skb: 27 callbacks suppressed
[  944.785286][   T28] audit: type=1400 audit(2000001702.196:18823): avc:  denied  { watch watch_reads } for  pid=29096 comm="syz.1.19574" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  944.790904][T17454] veth0_macvtap: left promiscuous mode
[  944.826366][T17454] veth1_vlan: left promiscuous mode
[  944.832181][T17454] veth0_vlan: left promiscuous mode
[  945.219194][T17454] team0 (unregistering): Port device team_slave_1 removed
[  945.229626][T17454] team0 (unregistering): Port device team_slave_0 removed
[  945.310540][T29134] netlink: 'syz.8.19576': attribute type 16 has an invalid length.
[  945.318770][T29134] netlink: 'syz.8.19576': attribute type 17 has an invalid length.
[  945.338210][T29134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  945.361887][T28476] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  945.421199][T28926] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.445560][T28926] 8021q: adding VLAN 0 to HW filter on device team0
[  945.458133][T17456] bridge0: port 1(bridge_slave_0) entered blocking state
[  945.465700][T17456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  945.486506][T17423] bridge0: port 2(bridge_slave_1) entered blocking state
[  945.493645][T17423] bridge0: port 2(bridge_slave_1) entered forwarding state
[  945.541824][T29163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  945.596192][T28926] 8021q: adding VLAN 0 to HW filter on device batadv0
[  945.728775][T28926] veth0_vlan: entered promiscuous mode
[  945.737726][T28926] veth1_vlan: entered promiscuous mode
[  945.752795][T28926] veth0_macvtap: entered promiscuous mode
[  945.771479][T28926] veth1_macvtap: entered promiscuous mode
[  945.788289][T29207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19590'.
[  945.808599][T29207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19590'.
[  945.831801][T28926] batman_adv: batadv0: Interface activated: batadv_slave_0
[  945.865135][T28926] batman_adv: batadv0: Interface activated: batadv_slave_1
[  945.890190][T17454] bridge_slave_1: left allmulticast mode
[  945.900451][T17454] bridge_slave_1: left promiscuous mode
[  945.923299][T17454] bridge0: port 2(bridge_slave_1) entered disabled state
[  946.176050][ T9413] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  946.230930][T17454] bridge_slave_0: left allmulticast mode
[  946.236641][T17454] bridge_slave_0: left promiscuous mode
[  946.242270][T17454] bridge0: port 1(bridge_slave_0) entered disabled state
[  946.284350][T17454] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  946.366446][T17454] batman_adv: batadv0: Removing interface: ip6gretap1
[  946.374497][T17099] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13)
[  946.600906][T17454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  946.616725][T17454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  946.639197][T17454] bond0 (unregistering): (slave macvlan3): Releasing backup interface
[  946.659384][T17454] bond0 (unregistering): Released all slaves
[  946.685772][T17454] bond1 (unregistering): (slave lo): Releasing backup interface
[  946.715059][T17454] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  946.737337][T17454] bond1 (unregistering): Released all slaves
[  946.749771][T17436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  946.785322][T17436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  946.805860][T17436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  946.839034][T17454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  946.850660][T17454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  946.872222][T17454] batman_adv: batadv0: Removing interface: macsec1
[  946.884932][T29256] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19585'.
[  946.942542][T17454] team0 (unregistering): Port device team_slave_1 removed
[  946.953749][T17454] team0 (unregistering): Port device team_slave_0 removed
[  946.991430][T17436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  947.043221][T28955] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  947.055209][T28955] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  947.070726][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19591'.
[  947.083303][T28955] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  947.091724][T28955] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  947.125752][T28955] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  947.136370][T28955] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  947.144044][T28955] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  947.159793][T28955] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  947.295217][T29282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19594'.
[  947.303629][T28955] 8021q: adding VLAN 0 to HW filter on device bond0
[  947.335653][T28955] 8021q: adding VLAN 0 to HW filter on device team0
[  947.370314][T17423] bridge0: port 1(bridge_slave_0) entered blocking state
[  947.377484][T17423] bridge0: port 1(bridge_slave_0) entered forwarding state
[  947.405313][T17423] bridge0: port 2(bridge_slave_1) entered blocking state
[  947.412390][T17423] bridge0: port 2(bridge_slave_1) entered forwarding state
[  947.478628][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  947.608247][T28955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  947.754619][T28955] veth0_vlan: entered promiscuous mode
[  947.771313][T28955] veth1_vlan: entered promiscuous mode
[  947.799706][T28955] veth0_macvtap: entered promiscuous mode
[  947.821299][T28955] veth1_macvtap: entered promiscuous mode
[  947.843769][T28955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  947.875603][T28955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  947.897328][T17456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  948.195433][T29280] kexec: Could not allocate control_code_buffer
[  948.570886][T17456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  948.598180][T17456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  948.623597][T17456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  948.686380][T17454] IPVS: stop unused estimator thread 0...
[  948.732559][T29331] netlink: 'syz.3.19608': attribute type 4 has an invalid length.
[  948.754604][T29331] netlink: 'syz.3.19608': attribute type 4 has an invalid length.
[  949.062163][T29376] loop4: detected capacity change from 0 to 128
[  949.193979][T29376] syz.4.19619: attempt to access beyond end of device
[  949.193979][T29376] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  949.208093][T29376] syz.4.19619: attempt to access beyond end of device
[  949.208093][T29376] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[  949.223314][T29376] syz.4.19619: attempt to access beyond end of device
[  949.223314][T29376] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[  949.237931][T29376] syz.4.19619: attempt to access beyond end of device
[  949.237931][T29376] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[  949.256734][T29376] syz.4.19619: attempt to access beyond end of device
[  949.256734][T29376] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[  949.294584][T29376] syz.4.19619: attempt to access beyond end of device
[  949.294584][T29376] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[  949.334127][T29376] syz.4.19619: attempt to access beyond end of device
[  949.334127][T29376] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[  949.379753][T29376] syz.4.19619: attempt to access beyond end of device
[  949.379753][T29376] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[  949.424954][T29376] syz.4.19619: attempt to access beyond end of device
[  949.424954][T29376] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[  949.455408][T29376] syz.4.19619: attempt to access beyond end of device
[  949.455408][T29376] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[  949.899241][   T28] audit: type=1326 audit(2000001707.316:18824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.8.19629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f798649c819 code=0x0
[  950.114171][T29501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19632'.
[  950.951295][T29546] loop4: detected capacity change from 0 to 512
[  951.160395][T29558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  951.511042][T29558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  951.661810][T29558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  951.744551][T29558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  951.773963][T29585] lo speed is unknown, defaulting to 1000
[  951.785053][T29585] lo speed is unknown, defaulting to 1000
[  951.800474][T29585] lo speed is unknown, defaulting to 1000
[  951.855888][T17454] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  951.892111][T17454] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  951.921791][T17454] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  951.946833][T17454] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  952.012045][T28474] lo speed is unknown, defaulting to 1000
[  952.019256][T29585] infiniband lyz2: set down
[  952.030840][T29585] infiniband lyz2: added lo
[  952.092407][T29585] RDS/IB: lyz2: added
[  952.096549][T29585] smc: adding ib device lyz2 with port count 1
[  952.102793][T29585] smc:    ib device lyz2 port 1 has no pnetid
[  952.108902][T17097] lo speed is unknown, defaulting to 1000
[  952.115301][T29585] lo speed is unknown, defaulting to 1000
[  952.129443][T29588] netlink: 'syz.4.19664': attribute type 7 has an invalid length.
[  952.137677][T29588] netlink: 'syz.4.19664': attribute type 8 has an invalid length.
[  952.183408][T29585] lo speed is unknown, defaulting to 1000
[  952.225535][T29585] lo speed is unknown, defaulting to 1000
[  952.274683][T29585] lo speed is unknown, defaulting to 1000
[  952.316205][T29585] lo speed is unknown, defaulting to 1000
[  952.355697][T29585] lo speed is unknown, defaulting to 1000
[  952.399206][T29585] lo speed is unknown, defaulting to 1000
[  952.525425][T29585] lo speed is unknown, defaulting to 1000
[  952.576473][T29585] lo speed is unknown, defaulting to 1000
[  952.703183][T29585] lo speed is unknown, defaulting to 1000
[  952.945802][T29624] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19680'.
[  952.968906][T29624] netlink: 60 bytes leftover after parsing attributes in process `syz.8.19680'.
[  953.544392][   T28] audit: type=1400 audit(2000001710.946:18825): avc:  denied  { read write } for  pid=28926 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  953.575481][   T28] audit: type=1400 audit(2000001710.946:18826): avc:  denied  { open } for  pid=28926 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  953.606416][   T28] audit: type=1400 audit(2000001710.946:18827): avc:  denied  { ioctl } for  pid=28926 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  953.636680][   T28] audit: type=1400 audit(2000001710.946:18828): avc:  denied  { recv } for  pid=29649 comm="syz.2.19692" saddr=10.128.0.163 src=30036 daddr=10.128.1.48 dest=60220 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  953.898637][   T28] audit: type=1400 audit(2000001711.266:18829): avc:  denied  { create } for  pid=29657 comm="syz.4.19696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  953.939704][   T28] audit: type=1400 audit(2000001711.336:18830): avc:  denied  { sys_admin } for  pid=29657 comm="syz.4.19696" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  954.016334][   T28] audit: type=1400 audit(2000001711.376:18831): avc:  denied  { open } for  pid=29660 comm="syz.3.19697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  954.077117][   T28] audit: type=1400 audit(2000001711.376:18832): avc:  denied  { perfmon } for  pid=29660 comm="syz.3.19697" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  954.133510][   T28] audit: type=1400 audit(2000001711.376:18833): avc:  denied  { kernel } for  pid=29660 comm="syz.3.19697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  954.296453][T29675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19702'.
[  954.404261][T29682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19702'.
[  954.707618][T29697] syzkaller0: entered promiscuous mode
[  954.713196][T29697] syzkaller0: entered allmulticast mode
[  954.785469][T29703] tipc: Failed to remove unknown binding: 66,1,1/0:2174784459/2174784461
[  954.802224][T29703] tipc: Failed to remove unknown binding: 66,1,1/0:2174784459/2174784461
[  954.909979][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  954.910026][   T28] audit: type=1400 audit(2000001712.326:18860): avc:  denied  { create } for  pid=29711 comm="syz.1.19715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  954.926765][T29713] lo speed is unknown, defaulting to 1000
[  954.947405][   T28] audit: type=1400 audit(2000001712.326:18861): avc:  denied  { ioctl } for  pid=29711 comm="syz.1.19715" path="socket:[190471]" dev="sockfs" ino=190471 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  955.099363][T29715] netlink: 'syz.1.19716': attribute type 16 has an invalid length.
[  955.120119][T29715] netlink: 'syz.1.19716': attribute type 17 has an invalid length.
[  955.122192][   T28] audit: type=1400 audit(2000001712.526:18862): avc:  denied  { create } for  pid=29716 comm="syz.2.19727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  955.186779][T29715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  955.206110][   T28] audit: type=1400 audit(2000001712.556:18863): avc:  denied  { bind } for  pid=29716 comm="syz.2.19727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  955.270175][   T28] audit: type=1400 audit(2000001712.566:18864): avc:  denied  { listen } for  pid=29716 comm="syz.2.19727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  955.335000][   T28] audit: type=1400 audit(2000001712.566:18865): avc:  denied  { connect } for  pid=29716 comm="syz.2.19727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  955.368558][   T28] audit: type=1400 audit(2000001712.566:18866): avc:  denied  { accept } for  pid=29716 comm="syz.2.19727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  955.401576][   T28] audit: type=1400 audit(2000001712.566:18867): avc:  denied  { write } for  pid=29716 comm="syz.2.19727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  955.431692][   T28] audit: type=1400 audit(2000001712.566:18868): avc:  denied  { read } for  pid=29716 comm="syz.2.19727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  955.469108][   T28] audit: type=1400 audit(2000001712.646:18869): avc:  denied  { create } for  pid=29724 comm="syz.8.19720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  955.712452][T29730] syz.1.19722 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  955.726759][T29730] CPU: 0 UID: 0 PID: 29730 Comm: syz.1.19722 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  955.726876][T29730] Tainted: [W]=WARN
[  955.726884][T29730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  955.726899][T29730] Call Trace:
[  955.726907][T29730]  <TASK>
[  955.726916][T29730]  __dump_stack+0x1d/0x30
[  955.726946][T29730]  dump_stack_lvl+0x95/0xd0
[  955.727041][T29730]  dump_stack+0x15/0x1b
[  955.727070][T29730]  dump_header+0x80/0x240
[  955.727098][T29730]  oom_kill_process+0x295/0x350
[  955.727122][T29730]  out_of_memory+0x97d/0xb80
[  955.727188][T29730]  try_charge_memcg+0x62f/0xa10
[  955.727234][T29730]  __memcg_kmem_charge_page+0x1ce/0x3f0
[  955.727269][T29730]  __alloc_frozen_pages_noprof+0x18a/0x350
[  955.727340][T29730]  alloc_pages_mpol+0xb3/0x260
[  955.727374][T29730]  ? mod_lruvec_state+0xe0/0xf0
[  955.727402][T29730]  alloc_pages_noprof+0x8f/0x140
[  955.727437][T29730]  __vmalloc_node_range_noprof+0xaed/0x11c0
[  955.727515][T29730]  __kvmalloc_node_noprof+0x3d4/0x640
[  955.727544][T29730]  ? futex_hash_allocate+0x190/0x9a0
[  955.727568][T29730]  ? futex_hash_allocate+0x190/0x9a0
[  955.727591][T29730]  futex_hash_allocate+0x190/0x9a0
[  955.727614][T29730]  ? cap_task_prctl+0x13f/0x6b0
[  955.727669][T29730]  futex_hash_prctl+0xd8/0xf0
[  955.727691][T29730]  __se_sys_prctl+0x4f4/0x1400
[  955.727767][T29730]  __x64_sys_prctl+0x67/0x80
[  955.727801][T29730]  x64_sys_call+0x2533/0x3020
[  955.727831][T29730]  do_syscall_64+0x12c/0x3b0
[  955.727922][T29730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.727950][T29730] RIP: 0033:0x7f025714c819
[  955.727997][T29730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  955.728017][T29730] RSP: 002b:00007f0255ba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  955.728041][T29730] RAX: ffffffffffffffda RBX: 00007f02573c5fa0 RCX: 00007f025714c819
[  955.728074][T29730] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  955.728091][T29730] RBP: 00007f02571e2c91 R08: 0000000000000000 R09: 0000000000000000
[  955.728107][T29730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  955.728123][T29730] R13: 00007f02573c6038 R14: 00007f02573c5fa0 R15: 00007fff1f3425f8
[  955.728145][T29730]  </TASK>
[  955.728152][T29730] memory: usage 307200kB, limit 307200kB, failcnt 646
[  955.785013][T29751] loop4: detected capacity change from 0 to 512
[  955.886515][T29730] memory+swap: usage 316588kB, limit 9007199254740988kB, failcnt 0
[  955.902299][T29751] journal_path: Non-blockdev passed as './file2'
[  955.988245][T29751] EXT4-fs: error: could not find journal device path
[  956.000042][T29730] kmem: usage 230048kB, limit 9007199254740988kB, failcnt 0
[  956.007567][T29730] Memory cgroup stats for /syz1:
[  956.008297][T29730] cache 16408576
[  956.017162][T29730] rss 565248
[  956.020628][T29730] shmem 16302080
[  956.024265][T29730] mapped_file 106496
[  956.028561][T29730] dirty 106496
[  956.031975][T29730] writeback 0
[  956.035314][T29730] workingset_refault_anon 2977
[  956.040533][T29730] workingset_refault_file 5832
[  956.045372][T29730] swap 53288960
[  956.049330][T29730] swapcached 116006912
[  956.053523][T29730] pgpgin 880616
[  956.057123][T29730] pgpgout 876346
[  956.060869][T29730] pgfault 798144
[  956.064504][T29730] pgmajfault 584
[  956.068103][T29730] inactive_anon 16494592
[  956.084623][T29730] active_anon 888832
[  956.092961][T29730] inactive_file 0
[  956.100024][T29730] active_file 106496
[  956.108373][T29730] unevictable 0
[  956.118735][T29730] hierarchical_memory_limit 314572800
[  956.132577][T29757] netlink: 'syz.3.19734': attribute type 16 has an invalid length.
[  956.140537][T29730] hierarchical_memsw_limit 9223372036854771712
[  956.152191][T29730] total_cache 16408576
[  956.156729][T29757] netlink: 'syz.3.19734': attribute type 17 has an invalid length.
[  956.166362][T29730] total_rss 565248
[  956.173285][T29730] total_shmem 16302080
[  956.195126][T29730] total_mapped_file 106496
[  956.214148][T29757] 8021q: adding VLAN 0 to HW filter on device team0
[  956.220865][T29730] total_dirty 106496
[  956.232708][T29730] total_writeback 0
[  956.237005][T29757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  956.255550][T29730] total_workingset_refault_anon 2977
[  956.264050][T29730] total_workingset_refault_file 5832
[  956.275478][T29730] total_swap 53288960
[  956.284205][T29730] total_swapcached 116006912
[  956.294280][T29730] total_pgpgin 880616
[  956.298630][ T3429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  956.315366][T29730] total_pgpgout 876346
[  956.327967][T29730] total_pgfault 798144
[  956.339555][T29730] total_pgmajfault 584
[  956.352989][T29730] total_inactive_anon 16494592
[  956.364249][T29730] total_active_anon 888832
[  956.373204][T29730] total_inactive_file 0
[  956.377834][T29730] total_active_file 106496
[  956.382637][T29730] total_unevictable 0
[  956.387799][T29768] bridge0: port 3(syz_tun) entered blocking state
[  956.394522][T29768] bridge0: port 3(syz_tun) entered disabled state
[  956.401244][T29730] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15602,pid=17338,uid=0
[  956.417081][T29768] syz_tun: entered allmulticast mode
[  956.424103][T29768] syz_tun: entered promiscuous mode
[  956.429467][T29730] Memory cgroup out of memory: Killed process 17338 (syz.1.15602) total-vm:96212kB, anon-rss:1456kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000
[  956.451399][T29768] bridge0: port 3(syz_tun) entered blocking state
[  956.457841][T29768] bridge0: port 3(syz_tun) entered forwarding state
[  956.459069][T29771] netlink: 'syz.4.19738': attribute type 10 has an invalid length.
[  956.549435][T29771] bridge0: port 3(syz_tun) entered disabled state
[  956.556320][T29771] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.563944][T29771] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.578328][T29771] bridge0: port 3(syz_tun) entered blocking state
[  956.584851][T29771] bridge0: port 3(syz_tun) entered forwarding state
[  956.591535][T29771] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.598665][T29771] bridge0: port 2(bridge_slave_1) entered forwarding state
[  956.606032][T29771] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.613228][T29771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  956.634863][T29771] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  956.645618][T17454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  956.913412][T29799] bridge0: port 3(syz_tun) entered disabled state
[  956.940870][T29799] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.951083][T29799] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.958733][T29800] netlink: 'syz.4.19748': attribute type 16 has an invalid length.
[  956.976595][T29800] netlink: 'syz.4.19748': attribute type 17 has an invalid length.
[  957.107904][T29800] bridge0: port 3(syz_tun) entered blocking state
[  957.114403][T29800] bridge0: port 3(syz_tun) entered forwarding state
[  957.158862][ T3429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  957.213603][T29800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  957.323904][T29808] netlink: 64 bytes leftover after parsing attributes in process `syz.8.19763'.
[  957.670752][T29822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19756'.
[  957.744157][T29822] team0: Port device team_slave_0 removed
[  957.764399][T17451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  957.780305][T17451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  958.154336][T29839] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19766'.
[  958.378560][T17094] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  958.616642][T29856] lo speed is unknown, defaulting to 1000
[  958.732110][T29861] tipc: Failed to remove unknown binding: 66,1,1/0:2772762414/2772762416
[  958.746166][T29861] tipc: Failed to remove unknown binding: 66,1,1/0:2772762414/2772762416
[  959.966196][   T28] kauditd_printk_skb: 76 callbacks suppressed
[  959.966233][   T28] audit: type=1400 audit(2000001717.376:18946): avc:  denied  { ioctl } for  pid=29886 comm="syz.4.19785" path="socket:[189964]" dev="sockfs" ino=189964 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  960.089587][   T28] audit: type=1400 audit(2000001717.506:18947): avc:  denied  { create } for  pid=29888 comm="syz.4.19786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  960.137796][   T28] audit: type=1400 audit(2000001717.526:18948): avc:  denied  { bind } for  pid=29888 comm="syz.4.19786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  960.187544][   T28] audit: type=1400 audit(2000001717.526:18949): avc:  denied  { listen } for  pid=29888 comm="syz.4.19786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  960.228504][   T28] audit: type=1400 audit(2000001717.526:18950): avc:  denied  { connect } for  pid=29888 comm="syz.4.19786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  960.270189][   T28] audit: type=1400 audit(2000001717.526:18951): avc:  denied  { write } for  pid=29888 comm="syz.4.19786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  960.291459][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  960.338634][   T28] audit: type=1400 audit(2000001717.526:18952): avc:  denied  { accept } for  pid=29888 comm="syz.4.19786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  960.359484][   T28] audit: type=1400 audit(2000001717.526:18953): avc:  denied  { read } for  pid=29888 comm="syz.4.19786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  960.424167][   T28] audit: type=1400 audit(2000001717.836:18954): avc:  denied  { map_read map_write } for  pid=29900 comm="syz.1.19791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  960.471040][T29904] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  960.512318][   T28] audit: type=1400 audit(2000001717.926:18955): avc:  denied  { mounton } for  pid=29905 comm="syz.3.19793" path="/2195/file0" dev="tmpfs" ino=11346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  961.721532][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  962.261704][T29923] lo speed is unknown, defaulting to 1000
[  962.335730][T29927] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.362230][T29927] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.423527][T29940] netlink: 'syz.2.19800': attribute type 16 has an invalid length.
[  962.431929][T29940] netlink: 'syz.2.19800': attribute type 17 has an invalid length.
[  962.567173][T29949] tipc: Failed to remove unknown binding: 66,1,1/0:1979976977/1979976979
[  962.584822][T29940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  962.601828][T29949] tipc: Failed to remove unknown binding: 66,1,1/0:1979976977/1979976979
[  962.757429][T29955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19813'.
[  962.779757][T29953] syzkaller0: entered promiscuous mode
[  962.787903][T29953] syzkaller0: entered allmulticast mode
[  962.798162][T29955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19813'.
[  962.866980][T29960] lo speed is unknown, defaulting to 1000
[  962.911379][T29965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19817'.
[  963.039357][T29983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19824'.
[  963.058432][T29983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19824'.
[  963.708808][T30026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19841'.
[  963.756274][T30026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19841'.
[  963.786202][T30006] bridge0: port 3(syz_tun) entered disabled state
[  963.806723][T30006] syz_tun (unregistering): left allmulticast mode
[  963.815512][T30006] syz_tun (unregistering): left promiscuous mode
[  963.824709][T30006] bridge0: port 3(syz_tun) entered disabled state
[  963.941298][   T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.056586][T30040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19848'.
[  964.089313][   T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.222266][T30041] lo speed is unknown, defaulting to 1000
[  964.269857][   T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.363709][   T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.431262][T30064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19854'.
[  964.448740][T30064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19854'.
[  964.473602][T30041] chnl_net:caif_netlink_parms(): no params data found
[  964.602164][T30041] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.648164][T30041] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.655395][T30041] bridge_slave_0: entered allmulticast mode
[  964.661791][T30041] bridge_slave_0: entered promiscuous mode
[  964.719964][   T12] bridge_slave_1: left allmulticast mode
[  964.731086][   T12] bridge_slave_1: left promiscuous mode
[  964.736823][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.791627][T30067] syz.3.19855 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  964.805932][T30067] CPU: 0 UID: 0 PID: 30067 Comm: syz.3.19855 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  964.806028][T30067] Tainted: [W]=WARN
[  964.806036][T30067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  964.806049][T30067] Call Trace:
[  964.806057][T30067]  <TASK>
[  964.806066][T30067]  __dump_stack+0x1d/0x30
[  964.806097][T30067]  dump_stack_lvl+0x95/0xd0
[  964.806166][T30067]  dump_stack+0x15/0x1b
[  964.806190][T30067]  dump_header+0x80/0x240
[  964.806218][T30067]  oom_kill_process+0x295/0x350
[  964.806332][T30067]  out_of_memory+0x97d/0xb80
[  964.806381][T30067]  try_charge_memcg+0x62f/0xa10
[  964.806488][T30067]  __memcg_kmem_charge_page+0x1ce/0x3f0
[  964.806570][T30067]  __alloc_frozen_pages_noprof+0x18a/0x350
[  964.806627][T30067]  alloc_pages_mpol+0xb3/0x260
[  964.806659][T30067]  ? mod_lruvec_state+0xe0/0xf0
[  964.806748][T30067]  alloc_pages_noprof+0x8f/0x140
[  964.806781][T30067]  __vmalloc_node_range_noprof+0xaed/0x11c0
[  964.806843][T30067]  __kvmalloc_node_noprof+0x3d4/0x640
[  964.806874][T30067]  ? futex_hash_allocate+0x190/0x9a0
[  964.806958][T30067]  ? futex_hash_allocate+0x190/0x9a0
[  964.806981][T30067]  futex_hash_allocate+0x190/0x9a0
[  964.807005][T30067]  ? cap_task_prctl+0x13f/0x6b0
[  964.807057][T30067]  futex_hash_prctl+0xd8/0xf0
[  964.807077][T30067]  __se_sys_prctl+0x4f4/0x1400
[  964.807109][T30067]  __x64_sys_prctl+0x67/0x80
[  964.807241][T30067]  x64_sys_call+0x2533/0x3020
[  964.807275][T30067]  do_syscall_64+0x12c/0x3b0
[  964.807305][T30067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.807347][T30067] RIP: 0033:0x7f6e1bc5c819
[  964.807362][T30067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.807382][T30067] RSP: 002b:00007f6e1a6af028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  964.807402][T30067] RAX: ffffffffffffffda RBX: 00007f6e1bed5fa0 RCX: 00007f6e1bc5c819
[  964.807474][T30067] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  964.807489][T30067] RBP: 00007f6e1bcf2c91 R08: 0000000000000000 R09: 0000000000000000
[  964.807505][T30067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  964.807519][T30067] R13: 00007f6e1bed6038 R14: 00007f6e1bed5fa0 R15: 00007ffff0fccb28
[  964.807541][T30067]  </TASK>
[  964.807550][T30067] memory: usage 307200kB, limit 307200kB, failcnt 1265
[  965.078593][T30067] memory+swap: usage 279256kB, limit 9007199254740988kB, failcnt 0
[  965.087623][T30067] kmem: usage 268276kB, limit 9007199254740988kB, failcnt 0
[  965.088640][   T12] bridge_slave_0: left allmulticast mode
[  965.107142][T30067] Memory cgroup stats for /syz3:
[  965.107862][T30067] cache 0
[  965.108529][   T12] bridge_slave_0: left promiscuous mode
[  965.126658][T30067] rss 188416
[  965.133514][T30067] shmem 0
[  965.138777][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  965.139990][T30067] mapped_file 0
[  965.164807][T30067] dirty 0
[  965.174877][T30067] writeback 0
[  965.186118][T30067] workingset_refault_anon 3636
[  965.199006][T30067] workingset_refault_file 1648
[  965.208663][ T6105] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13)
[  965.210482][T30067] swap 937984
[  965.231480][T30067] swapcached 51658752
[  965.264275][T30067] pgpgin 1108316
[  965.273819][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  965.283220][T30067] pgpgout 1108266
[  965.306204][T30067] pgfault 1021546
[  965.325803][T30067] pgmajfault 699
[  965.340392][T30067] inactive_anon 204800
[  965.351577][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  965.352365][T30067] active_anon 0
[  965.392641][T30067] inactive_file 0
[  965.402572][T30067] active_file 0
[  965.411677][T30067] unevictable 0
[  965.421668][T30067] hierarchical_memory_limit 314572800
[  965.436954][T30067] hierarchical_memsw_limit 9223372036854771712
[  965.454066][T30067] total_cache 0
[  965.463397][T30067] total_rss 188416
[  965.473219][T30067] total_shmem 0
[  965.483346][T30067] total_mapped_file 0
[  965.499397][T30067] total_dirty 0
[  965.507383][T30067] total_writeback 0
[  965.518499][T30067] total_workingset_refault_anon 3636
[  965.528724][T30067] total_workingset_refault_file 1648
[  965.538554][T30067] total_swap 937984
[  965.545348][T30067] total_swapcached 51658752
[  965.554230][T30067] total_pgpgin 1108316
[  965.564405][T30067] total_pgpgout 1108266
[  965.574444][T30067] total_pgfault 1021546
[  965.580707][T30067] total_pgmajfault 699
[  965.588632][T30067] total_inactive_anon 204800
[  965.598618][T30067] total_active_anon 0
[  965.608632][T30067] total_inactive_file 0
[  965.615081][T30067] total_active_file 0
[  965.623764][T30067] total_unevictable 0
[  965.633871][T30067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.19855,pid=30066,uid=0
[  965.668506][T30067] Memory cgroup out of memory: Killed process 30067 (syz.3.19855) total-vm:96080kB, anon-rss:1408kB, file-rss:22192kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  966.091977][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  966.101433][   T12] bond0 (unregistering): Released all slaves
[  966.115897][T30041] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.123019][T30041] bridge0: port 2(bridge_slave_1) entered disabled state
[  966.130046][   T28] kauditd_printk_skb: 56 callbacks suppressed
[  966.130058][   T28] audit: type=1400 audit(2000001723.496:19012): avc:  denied  { setopt } for  pid=30101 comm="syz.1.19865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  966.146682][T30041] bridge_slave_1: entered allmulticast mode
[  966.162064][   T28] audit: type=1400 audit(2000001723.556:19013): avc:  denied  { ioctl } for  pid=30103 comm="syz.1.19866" path="socket:[190416]" dev="sockfs" ino=190416 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  966.168146][T30041] bridge_slave_1: entered promiscuous mode
[  966.192332][   T28] audit: type=1400 audit(2000001723.556:19014): avc:  denied  { search } for  pid=3047 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.212319][T30041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  966.219525][   T28] audit: type=1400 audit(2000001723.556:19015): avc:  denied  { search } for  pid=3047 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.219552][   T28] audit: type=1400 audit(2000001723.556:19016): avc:  denied  { search } for  pid=3047 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.236756][T30041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  966.281178][   T28] audit: type=1400 audit(2000001723.556:19017): avc:  denied  { read } for  pid=3047 comm="dhcpcd" name="n187" dev="tmpfs" ino=67935 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  966.303185][   T28] audit: type=1400 audit(2000001723.556:19018): avc:  denied  { open } for  pid=3047 comm="dhcpcd" path="/run/udev/data/n187" dev="tmpfs" ino=67935 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  966.326373][   T28] audit: type=1400 audit(2000001723.556:19019): avc:  denied  { getattr } for  pid=3047 comm="dhcpcd" path="/run/udev/data/n187" dev="tmpfs" ino=67935 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  966.369182][T30041] team0: Port device team_slave_0 added
[  966.378753][T30041] team0: Port device team_slave_1 added
[  966.398557][T30041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  966.411681][T30041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  966.443465][T30041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  966.460311][T30041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  966.480239][T30041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  966.483449][   T28] audit: type=1400 audit(2000001723.896:19020): avc:  denied  { read open } for  pid=30114 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.552378][T30041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  966.583913][   T12] hsr_slave_0: left promiscuous mode
[  966.600399][   T12] hsr_slave_1: left promiscuous mode
[  966.620827][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  966.647580][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  966.657594][   T28] audit: type=1400 audit(2000001723.896:19021): avc:  denied  { getattr } for  pid=30114 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.688247][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  966.707377][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  966.751329][   T12] veth1_macvtap: left promiscuous mode
[  966.774675][   T12] veth0_macvtap: left promiscuous mode
[  966.792265][   T12] veth1_vlan: left promiscuous mode
[  966.813276][   T12] veth0_vlan: left promiscuous mode
[  966.985199][   T12] team0 (unregistering): Port device team_slave_1 removed
[  967.015380][   T12] team0 (unregistering): Port device team_slave_0 removed
[  967.124777][ T3047] 8021q: adding VLAN 0 to HW filter on device eth4
[  967.146994][T30041] hsr_slave_0: entered promiscuous mode
[  967.154002][T30041] hsr_slave_1: entered promiscuous mode
[  967.162094][T30041] debugfs: 'hsr0' already exists in 'hsr'
[  967.176080][T30041] Cannot create hsr debugfs directory
[  967.313170][T30041] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  967.342358][T30041] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  967.411782][T30041] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  967.445438][T30041] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  967.493748][ T3047] 8021q: adding VLAN 0 to HW filter on device eth6
[  967.532115][T30041] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  967.542719][T30041] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  967.613171][T30041] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  967.644361][T30041] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  967.761608][T30041] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  967.784038][T30041] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  967.797841][T30041] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  967.824374][T30041] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  967.846555][ T3047] 8021q: adding VLAN 0 to HW filter on device eth7
[  967.855911][T30041] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  967.872021][T30041] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  967.887909][T30041] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  967.906414][T30041] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  967.927902][T30214] cgroup: Setting release_agent not allowed
[  968.006195][T30041] 8021q: adding VLAN 0 to HW filter on device bond0
[  968.049920][T30041] 8021q: adding VLAN 0 to HW filter on device team0
[  968.079586][T28682] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.087091][T28682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  968.113413][T28682] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.120476][T28682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  968.196476][T30041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  968.279719][T30240] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  968.293943][ T3047] 8021q: adding VLAN 0 to HW filter on device eth8
[  968.413557][T30041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  968.656658][T30277] __nla_validate_parse: 1 callbacks suppressed
[  968.656673][T30277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19898'.
[  968.711767][T30284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19900'.
[  968.788137][T30041] veth0_vlan: entered promiscuous mode
[  968.809358][T30294] netlink: 'syz.1.19904': attribute type 16 has an invalid length.
[  968.821780][T30041] veth1_vlan: entered promiscuous mode
[  968.853579][T30041] veth0_macvtap: entered promiscuous mode
[  968.863185][T30294] netlink: 'syz.1.19904': attribute type 17 has an invalid length.
[  968.877310][T30041] veth1_macvtap: entered promiscuous mode
[  968.938707][T30041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  968.958428][T30041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  968.983460][T28682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.000024][T28682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  969.136575][T28682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.184755][T28682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  969.898689][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  970.290920][T30343] loop5: detected capacity change from 0 to 256
[  970.351736][T30343] FAT-fs (loop5): codepage cp1250 not found
[  970.718881][T30358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19927'.
[  970.729430][T30358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19927'.
[  971.277982][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  971.277999][   T28] audit: type=1400 audit(2000001728.686:19050): avc:  denied  { bind } for  pid=30393 comm="syz.1.19943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  971.346257][   T28] audit: type=1400 audit(2000001728.726:19051): avc:  denied  { mount } for  pid=30392 comm="syz.2.19942" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  971.485539][   T28] audit: type=1400 audit(2000001728.896:19052): avc:  denied  { read } for  pid=30407 comm="syz.5.19948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  971.620817][   T28] audit: type=1400 audit(2000001729.036:19053): avc:  denied  { remount } for  pid=30414 comm="syz.2.19951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  971.846700][   T28] audit: type=1400 audit(2000001729.256:19054): avc:  denied  { cpu } for  pid=30428 comm="syz.8.19958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  971.877755][   T28] audit: type=1400 audit(2000001729.256:19055): avc:  denied  { cmd } for  pid=30431 comm="syz.2.19957" path="socket:[192242]" dev="sockfs" ino=192242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  972.007588][   T28] audit: type=1400 audit(2000001729.416:19056): avc:  denied  { shutdown } for  pid=30424 comm="syz.5.19955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  972.152053][T30451] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.19960'.
[  972.176260][T30451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19960'.
[  972.418897][   T28] audit: type=1400 audit(2000001729.826:19057): avc:  denied  { read } for  pid=30455 comm="syz.3.19965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  972.979591][   T28] audit: type=1400 audit(2000001730.366:19058): avc:  denied  { ioctl } for  pid=30471 comm="syz.3.19972" path="socket:[192563]" dev="sockfs" ino=192563 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  973.031074][   T28] audit: type=1400 audit(2000001730.416:19059): avc:  denied  { sys_nice } for  pid=30479 comm="syz.5.19974" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  973.134909][T30484] xt_limit: Overflow, try lower: 0/0
[  973.179328][T30484] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  973.252120][T30489] loop2: detected capacity change from 0 to 512
[  973.411614][T30489] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.19978: invalid indirect mapped block 256 (level 2)
[  973.425843][T30489] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  973.427911][T30489] EXT4-fs (loop2): 2 truncates cleaned up
[  973.445961][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  973.446080][    C1] EXT4-fs (loop2): initial error at time 2000001730: ext4_free_branches:1023: inode 11
[  973.446570][    C1] EXT4-fs (loop2): last error at time 2000001730: ext4_free_branches:1023: inode 11
[  973.512635][T30489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  973.562489][   T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap
[  973.575518][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  973.587718][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  973.587718][   T12] 
[  973.597361][   T12] EXT4-fs (loop2): Total free blocks count 0
[  973.603334][   T12] EXT4-fs (loop2): Free/Dirty block details
[  973.609220][   T12] EXT4-fs (loop2): free_blocks=0
[  973.614146][   T12] EXT4-fs (loop2): dirty_blocks=2
[  973.619165][   T12] EXT4-fs (loop2): Block reservation details
[  973.625184][   T12] EXT4-fs (loop2): i_reserved_data_blocks=2
[  973.631493][T17451] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28
[  973.643802][T28955] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  974.497207][T30556] tun0: tun_chr_ioctl cmd 1074025675
[  974.503018][T30556] tun0: persist enabled
[  974.617938][T30562] tipc: Started in network mode
[  974.623135][T30562] tipc: Node identity fea8e63fc52b, cluster identity 4711
[  974.632608][T30562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  974.696347][T30562] syzkaller0: entered promiscuous mode
[  974.703042][T30562] syzkaller0: entered allmulticast mode
[  974.710310][T30562] tipc: Resetting bearer <eth:syzkaller0>
[  974.791771][T30561] tipc: Resetting bearer <eth:syzkaller0>
[  974.816655][T30561] tipc: Disabling bearer <eth:syzkaller0>
[  974.934893][T30568] IPv6: NLM_F_REPLACE set, but no existing node found!
[  975.016962][T30579] loop5: detected capacity change from 0 to 8192
[  975.116709][T30585] bond0: option mode: unable to set because the bond device has slaves
[  975.302366][T30598] loop5: detected capacity change from 0 to 512
[  975.345234][T30598] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  975.368770][T30598] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.20020: corrupted in-inode xattr: e_value size too large
[  975.383634][T30598] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  975.385215][T30598] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.20020: couldn't read orphan inode 15 (err -117)
[  975.394389][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  975.394408][    C1] EXT4-fs (loop5): initial error at time 2000001732: ext4_iget_extra_inode:5128: inode 15
[  975.394433][    C1] EXT4-fs (loop5): last error at time 2000001732: ext4_iget_extra_inode:5128: inode 15
[  975.432371][T30598] loop5: lost filesystem error report for type 5 error -117
[  975.441673][T30598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  975.711245][T30610] xt_limit: Overflow, try lower: 0/0
[  975.807799][T30610] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  975.827832][T30041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  976.123730][T17454] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.202903][T17454] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.278798][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  976.278924][T17454] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.369621][T17454] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.494388][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  976.494507][   T28] audit: type=1400 audit(2000001733.906:19090): avc:  denied  { mac_admin } for  pid=30635 comm="syz.3.20035" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  976.556349][   T28] audit: type=1400 audit(2000001733.936:19091): avc:  denied  { relabelto } for  pid=30635 comm="syz.3.20035" name="/" dev="ramfs" ino=192911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0"
[  976.586111][T17454] bridge_slave_1: left allmulticast mode
[  976.601183][T17454] bridge_slave_1: left promiscuous mode
[  976.612427][T17454] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.622575][   T28] audit: type=1400 audit(2000001733.936:19092): avc:  denied  { associate } for  pid=30635 comm="syz.3.20035" name="/" dev="ramfs" ino=192911 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0"
[  976.662522][T17454] bridge_slave_0: left allmulticast mode
[  976.675198][T17454] bridge_slave_0: left promiscuous mode
[  976.692867][T17454] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.842850][T17454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  976.854384][T17454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  976.865155][T17454] bond0 (unregistering): Released all slaves
[  976.873643][T30636] vlan0: left allmulticast mode
[  976.879556][T30636] geneve0: left allmulticast mode
[  976.885020][T30636] vlan0: left promiscuous mode
[  976.890189][T30636] geneve0: left promiscuous mode
[  976.895761][T30636] bridge0: port 3(vlan0) entered disabled state
[  976.907624][T30636] batadv1: left allmulticast mode
[  976.914371][T30636] batadv1: left promiscuous mode
[  976.923272][T30636] bridge0: port 2(batadv1) entered disabled state
[  976.992856][T17454] tipc: Left network mode
[  977.053448][T17454] hsr_slave_0: left promiscuous mode
[  977.066042][T17454] hsr_slave_1: left promiscuous mode
[  977.075738][T17454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  977.083955][T17454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  977.106565][T17454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  977.114999][T17454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  977.135187][T17454] veth1_macvtap: left promiscuous mode
[  977.141467][T17454] veth0_macvtap: left promiscuous mode
[  977.148805][T17454] veth1_vlan: left promiscuous mode
[  977.154170][T17454] veth0_vlan: left promiscuous mode
[  977.260905][T17454] team0 (unregistering): Port device team_slave_1 removed
[  977.271359][T17454] team0 (unregistering): Port device team_slave_0 removed
[  977.308176][ T3047] 8021q: adding VLAN 0 to HW filter on device eth9
[  977.366628][T30638] lo speed is unknown, defaulting to 1000
[  977.600883][ T3047] 8021q: adding VLAN 0 to HW filter on device eth10
[  977.649670][T30638] chnl_net:caif_netlink_parms(): no params data found
[  977.866449][T30692] lo speed is unknown, defaulting to 1000
[  977.931872][T30638] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.939171][T30638] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.946405][T30638] bridge_slave_0: entered allmulticast mode
[  977.953416][T30638] bridge_slave_0: entered promiscuous mode
[  977.960460][T30638] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.964248][T30678] syz.8.20038 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0
[  977.967660][T30638] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.981705][T30678] CPU: 0 UID: 0 PID: 30678 Comm: syz.8.20038 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  977.981742][T30678] Tainted: [W]=WARN
[  977.981749][T30678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  977.981764][T30678] Call Trace:
[  977.981771][T30678]  <TASK>
[  977.981779][T30678]  __dump_stack+0x1d/0x30
[  977.981856][T30678]  dump_stack_lvl+0x95/0xd0
[  977.981885][T30678]  dump_stack+0x15/0x1b
[  977.981980][T30678]  dump_header+0x80/0x240
[  977.982009][T30678]  oom_kill_process+0x295/0x350
[  977.982032][T30678]  out_of_memory+0x97d/0xb80
[  977.982113][T30678]  try_charge_memcg+0x62f/0xa10
[  977.982173][T30678]  __memcg_kmem_charge_page+0x1ce/0x3f0
[  977.982206][T30678]  __alloc_frozen_pages_noprof+0x18a/0x350
[  977.982241][T30678]  alloc_pages_mpol+0xb3/0x260
[  977.982273][T30678]  ? mod_lruvec_state+0xe0/0xf0
[  977.982352][T30678]  alloc_pages_noprof+0x8f/0x140
[  977.982384][T30678]  __vmalloc_node_range_noprof+0xaed/0x11c0
[  977.982425][T30678]  __kvmalloc_node_noprof+0x3d4/0x640
[  977.982454][T30678]  ? futex_hash_allocate+0x190/0x9a0
[  977.982553][T30678]  ? futex_hash_allocate+0x190/0x9a0
[  977.982578][T30678]  futex_hash_allocate+0x190/0x9a0
[  977.982603][T30678]  ? cap_task_prctl+0x13f/0x6b0
[  977.982635][T30678]  futex_hash_prctl+0xd8/0xf0
[  977.982723][T30678]  __se_sys_prctl+0x4f4/0x1400
[  977.982760][T30678]  __x64_sys_prctl+0x67/0x80
[  977.982793][T30678]  x64_sys_call+0x2533/0x3020
[  977.982849][T30678]  do_syscall_64+0x12c/0x3b0
[  977.982892][T30678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.982920][T30678] RIP: 0033:0x7f798649c819
[  977.982938][T30678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.982968][T30678] RSP: 002b:00007f7984eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  977.983123][T30678] RAX: ffffffffffffffda RBX: 00007f7986715fa0 RCX: 00007f798649c819
[  977.983183][T30678] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  977.983198][T30678] RBP: 00007f7986532c91 R08: 0000000000000000 R09: 0000000000000000
[  977.983214][T30678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  977.983230][T30678] R13: 00007f7986716038 R14: 00007f7986715fa0 R15: 00007ffdf30dd188
[  977.983253][T30678]  </TASK>
[  977.983261][T30678] memory: usage 307200kB, limit 307200kB, failcnt 1449
[  977.991320][T30638] bridge_slave_1: entered allmulticast mode
[  977.999722][T30678] memory+swap: usage 309492kB, limit 9007199254740988kB, failcnt 0
[  977.999740][T30678] kmem: usage 306840kB, limit 9007199254740988kB, failcnt 0
[  977.999808][T30678] Memory cgroup stats for /syz8:
[  978.263938][T30678] cache 69632
[  978.264021][T30638] bridge_slave_1: entered promiscuous mode
[  978.290230][T30638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.300610][T30638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.309973][T30678] rss 294912
[  978.313175][T30678] shmem 65536
[  978.316518][T30678] mapped_file 4096
[  978.321229][T30638] team0: Port device team_slave_0 added
[  978.328668][T30678] dirty 4096
[  978.332123][T30678] writeback 0
[  978.335600][T30678] workingset_refault_anon 3915
[  978.340443][T30678] workingset_refault_file 5475
[  978.346303][T30678] swap 2347008
[  978.349926][T30678] swapcached 52998144
[  978.353971][T30678] pgpgin 1079772
[  978.357665][T30678] pgpgout 1079682
[  978.361943][T30638] team0: Port device team_slave_1 added
[  978.367518][T30678] pgfault 986601
[  978.371389][T30678] pgmajfault 2847
[  978.375308][T30678] inactive_anon 364544
[  978.412955][ T3047] 8021q: adding VLAN 0 to HW filter on device eth12
[  978.431178][T30678] active_anon 0
[  978.448586][T30678] inactive_file 0
[  978.453164][T30678] active_file 4096
[  978.477477][T30678] unevictable 0
[  978.501532][T30638] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.508617][T30678] hierarchical_memory_limit 314572800
[  978.514078][T30638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.514110][T30638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.514758][T30638] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.571405][T30678] hierarchical_memsw_limit 9223372036854771712
[  978.582829][T30678] total_cache 69632
[  978.591144][T30678] total_rss 294912
[  978.604658][T30678] total_shmem 65536
[  978.609929][T30678] total_mapped_file 4096
[  978.614221][T30678] total_dirty 4096
[  978.616739][   T28] audit: type=1326 audit(2000001736.006:19093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.3.20046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  978.617968][T30678] total_writeback 0
[  978.617978][T30678] total_workingset_refault_anon 3915
[  978.617989][T30678] total_workingset_refault_file 5475
[  978.618051][T30678] total_swap 2347008
[  978.660222][T30638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.711481][T30638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  978.722936][   T28] audit: type=1326 audit(2000001736.006:19094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.3.20046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  978.751885][T30678] total_swapcached 52998144
[  978.756616][T30678] total_pgpgin 1079772
[  978.760910][T30678] total_pgpgout 1079682
[  978.765441][T30678] total_pgfault 986601
[  978.771567][T30678] total_pgmajfault 2847
[  978.781433][T30678] total_inactive_anon 364544
[  978.798399][T30678] total_active_anon 0
[  978.810169][   T28] audit: type=1326 audit(2000001736.016:19095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.3.20046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  978.811403][T30678] total_inactive_file 0
[  978.886319][   T28] audit: type=1326 audit(2000001736.016:19096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.3.20046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  978.886494][T30678] total_active_file 4096
[  978.930791][T30678] total_unevictable 0
[  978.938592][T30678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.20038,pid=30677,uid=0
[  978.973388][T30678] Memory cgroup out of memory: Killed process 30678 (syz.8.20038) total-vm:96080kB, anon-rss:1408kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  979.005820][   T28] audit: type=1326 audit(2000001736.016:19097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.3.20046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  979.024246][T30638] hsr_slave_0: entered promiscuous mode
[  979.046554][T30638] hsr_slave_1: entered promiscuous mode
[  979.059364][T30638] debugfs: 'hsr0' already exists in 'hsr'
[  979.093324][T30638] Cannot create hsr debugfs directory
[  979.116862][   T28] audit: type=1326 audit(2000001736.016:19098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.3.20046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  979.179002][   T28] audit: type=1326 audit(2000001736.016:19099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.3.20046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc5c819 code=0x7ffc0000
[  979.375872][ T3047] 8021q: adding VLAN 0 to HW filter on device eth11
[  979.394073][T17097] IPVS: starting estimator thread 0...
[  979.411803][T30638] team0: Port device netdevsim1 removed
[  979.508566][T30750] IPVS: using max 2496 ests per chain, 124800 per kthread
[  979.520473][T30755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20055'.
[  979.550881][T30755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20055'.
[  979.555652][T30638] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  979.580227][T30638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  979.592286][T30638] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  979.613607][T30638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  979.627968][T30638] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  979.653113][T30638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  979.668980][T30638] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  979.695308][T30638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  979.779379][T30638] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.819451][T30638] 8021q: adding VLAN 0 to HW filter on device team0
[  979.847459][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.854954][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  979.922277][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.929740][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  980.058190][T30638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  980.082731][T30638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  980.251085][T30638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  980.484806][T30638] veth0_vlan: entered promiscuous mode
[  980.527571][T30638] veth1_vlan: entered promiscuous mode
[  980.571781][T30638] veth0_macvtap: entered promiscuous mode
[  980.602588][T30638] veth1_macvtap: entered promiscuous mode
[  980.666418][T30638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  980.712247][T30847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20067'.
[  980.720101][T30638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  980.782884][T30847] bond1: entered promiscuous mode
[  980.817279][T30847] 8021q: adding VLAN 0 to HW filter on device bond1
[  980.909482][T28682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  980.933915][T28682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  980.968431][T30850] 8021q: adding VLAN 0 to HW filter on device bond1
[  980.975573][T30850] bond1: (slave sit1): The slave device specified does not support setting the MAC address
[  980.991150][T30850] bond1: (slave sit1): Error -95 calling set_mac_address
[  981.058499][T28682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  981.076393][T28682] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  981.533678][   T28] kauditd_printk_skb: 44 callbacks suppressed
[  981.533696][   T28] audit: type=1400 audit(2000001738.946:19144): avc:  denied  { write } for  pid=30888 comm="syz.2.20079" name="netstat" dev="proc" ino=4026534752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  981.778428][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20085'.
[  981.801617][   T28] audit: type=1400 audit(2000001739.206:19145): avc:  denied  { accept } for  pid=30918 comm="syz.2.20086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  982.005050][   T28] audit: type=1400 audit(2000001739.416:19146): avc:  denied  { read } for  pid=30928 comm="syz.7.20090" lport=43799 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  982.345317][T30936] vlan2: left allmulticast mode
[  982.367635][T30936] geneve0: left allmulticast mode
[  982.387960][T30936] vlan2: left promiscuous mode
[  982.409799][T30936] geneve0: left promiscuous mode
[  982.428478][T30936] bridge0: port 3(vlan2) entered disabled state
[  982.456215][T30936] bridge_slave_1: left allmulticast mode
[  982.478332][T30936] bridge_slave_1: left promiscuous mode
[  982.501353][T30936] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.000384][   T28] audit: type=1400 audit(2000001740.416:19147): avc:  denied  { attach_queue } for  pid=30955 comm="syz.7.20100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  983.200363][T30966] netlink: 'syz.8.20102': attribute type 4 has an invalid length.
[  983.244305][T30966] netlink: 'syz.8.20102': attribute type 4 has an invalid length.
[  983.720678][T30981] netlink: 'syz.7.20104': attribute type 7 has an invalid length.
[  984.111616][   T28] audit: type=1400 audit(2000001741.526:19148): avc:  denied  { name_bind } for  pid=30995 comm="syz.7.20115" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  984.135382][T30996] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  984.200142][   T28] audit: type=1400 audit(2000001741.606:19149): avc:  denied  { read write } for  pid=30999 comm="syz.7.20116" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  984.257574][   T28] audit: type=1400 audit(2000001741.616:19150): avc:  denied  { open } for  pid=30999 comm="syz.7.20116" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  984.282121][   T28] audit: type=1400 audit(2000001741.666:19151): avc:  denied  { ioctl } for  pid=30999 comm="syz.7.20116" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  984.307889][T17455] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  984.359883][   T28] audit: type=1400 audit(2000001741.776:19152): avc:  denied  { create } for  pid=30999 comm="syz.7.20116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  984.485072][   T28] audit: type=1400 audit(2000001741.896:19153): avc:  denied  { mount } for  pid=31011 comm="syz.8.20119" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  984.997941][T31036] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20128'.
[  985.014977][T28474] kernel write not supported for file bpf-map (pid: 28474 comm: kworker/0:10)
[  985.076314][T31049] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.20130'.
[  985.085799][T31049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20130'.
[  985.150049][T31059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20136'.
[  985.174367][T31059] 8021q: adding VLAN 0 to HW filter on device bond8
[  985.183350][T31056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20135'.
[  985.213791][T31059] macsec1: entered promiscuous mode
[  985.224917][T31059] bond8: entered promiscuous mode
[  985.235515][T31059] 8021q: adding VLAN 0 to HW filter on device macsec1
[  985.242438][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  985.268103][T31059] bond8: left promiscuous mode
[  987.196633][T31000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  987.232374][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  987.232438][   T28] audit: type=1400 audit(2000001744.646:19160): avc:  denied  { bind } for  pid=31110 comm="syz.2.20152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  987.276228][   T28] audit: type=1400 audit(2000001744.676:19161): avc:  denied  { write } for  pid=31110 comm="syz.2.20152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  987.347533][   T28] audit: type=1326 audit(2000001744.756:19162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.7.20158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192ffc819 code=0x7ffc0000
[  987.396492][   T28] audit: type=1326 audit(2000001744.756:19163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.7.20158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192ffc819 code=0x7ffc0000
[  987.434754][   T28] audit: type=1326 audit(2000001744.756:19164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.7.20158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192ffc819 code=0x7ffc0000
[  987.491553][   T28] audit: type=1326 audit(2000001744.756:19165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.7.20158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192ffc819 code=0x7ffc0000
[  987.516859][   T28] audit: type=1326 audit(2000001744.756:19166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.7.20158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3192ffc819 code=0x7ffc0000
[  987.576342][   T28] audit: type=1326 audit(2000001744.756:19167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.7.20158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192ffc819 code=0x7ffc0000
[  987.651604][   T28] audit: type=1326 audit(2000001744.756:19168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.7.20158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192ffc819 code=0x7ffc0000
[  987.708259][   T28] audit: type=1326 audit(2000001744.756:19169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.7.20158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192ffc819 code=0x7ffc0000
[  987.754307][T31149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20167'.
[  988.037366][T31154] SELinux: failed to load policy
[  988.049117][T31160] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  988.352247][T31172] bridge6: entered promiscuous mode
[  988.371948][T31172] bridge6: entered allmulticast mode
[  988.382482][T31176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20179'.
[  988.454893][T31182] netlink: 'syz.2.20182': attribute type 5 has an invalid length.
[  988.685592][T31208] bridge4: entered promiscuous mode
[  988.691332][T31208] bridge4: entered allmulticast mode
[  988.701412][T31208] team0: Port device bridge4 added
[  988.719484][T31208] bridge0: port 3(team0) entered blocking state
[  988.726238][T31208] bridge0: port 3(team0) entered disabled state
[  988.733400][T31208] team0: entered allmulticast mode
[  988.739113][T31208] team_slave_1: entered allmulticast mode
[  988.746973][T31208] team0: entered promiscuous mode
[  988.753664][T31208] team_slave_1: entered promiscuous mode
[  989.381419][T31237] bridge1: entered promiscuous mode
[  989.397198][T31237] bridge1: entered allmulticast mode
[  989.408112][T31237] team0: Port device bridge1 added
[  989.449764][T31237] bridge0: port 3(team0) entered blocking state
[  989.460477][T31237] bridge0: port 3(team0) entered disabled state
[  989.479361][T31237] team0: entered allmulticast mode
[  989.494601][T31237] team_slave_0: entered allmulticast mode
[  989.501017][T31237] team_slave_1: entered allmulticast mode
[  989.509208][T31237] team0: entered promiscuous mode
[  989.514622][T31237] team_slave_0: entered promiscuous mode
[  989.521077][T31237] team_slave_1: entered promiscuous mode
[  989.527564][T31237] bridge0: port 3(team0) entered blocking state
[  989.534306][T31237] bridge0: port 3(team0) entered forwarding state
[  989.743510][T31261] loop7: detected capacity change from 0 to 512
[  989.787935][T31261] EXT4-fs: Ignoring removed oldalloc option
[  989.817855][T31261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  989.852819][T31261] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.20214: iget: bad i_size value: 38620345925642
[  989.880219][T31261] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  989.881447][T31261] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.20214: couldn't read orphan inode 15 (err -117)
[  989.890649][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  989.890665][    C1] EXT4-fs (loop7): initial error at time 2000001747: ext4_orphan_get:1397: inode 15
[  989.890694][    C1] EXT4-fs (loop7): last error at time 2000001747: ext4_orphan_get:1397: inode 15
[  989.928209][T31261] loop7: lost filesystem error report for type 5 error -117
[  989.929375][T31261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  990.140976][T31282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20219'.
[  990.164081][T31282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20219'.
[  990.788738][T17454] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:56: bg 0: block 5: invalid block bitmap
[  990.823268][T17454] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  990.849030][T17454] EXT4-fs (loop7): This should not happen!! Data will be lost
[  990.849030][T17454] 
[  990.859032][T17454] EXT4-fs (loop7): Total free blocks count 0
[  990.870883][T17454] EXT4-fs (loop7): Free/Dirty block details
[  990.882206][T17454] EXT4-fs (loop7): free_blocks=0
[  990.889314][T17454] EXT4-fs (loop7): dirty_blocks=14248
[  990.900498][T17454] EXT4-fs (loop7): Block reservation details
[  990.912365][T17454] EXT4-fs (loop7): i_reserved_data_blocks=14248
[  990.940013][T28682] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  990.974622][T30638] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  992.089348][T31374] loop7: detected capacity change from 0 to 512
[  992.127012][T31374] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.20239: inode has both inline data and extents flags
[  992.155923][T31374] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  992.156031][T31374] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.20239: couldn't read orphan inode 15 (err -117)
[  992.165225][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  992.165244][    C1] EXT4-fs (loop7): initial error at time 2000001749: ext4_orphan_get:1397: inode 15
[  992.165270][    C1] EXT4-fs (loop7): last error at time 2000001749: ext4_orphan_get:1397: inode 15
[  992.233552][T31374] loop7: lost filesystem error report for type 5 error -117
[  992.234135][T31374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  992.252437][T31383] bond3: entered allmulticast mode
[  992.260678][T31383] vcan1: entered allmulticast mode
[  993.076162][T30638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  993.126082][T31414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20246'.
[  993.182322][T31414] vlan2: entered promiscuous mode
[  993.205302][T31414] bridge0: entered promiscuous mode
[  993.343559][T31430] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.20255'.
[  994.839309][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  997.177781][T31494] loop7: detected capacity change from 0 to 512
[  997.197096][   T28] kauditd_printk_skb: 55 callbacks suppressed
[  997.197120][   T28] audit: type=1400 audit(2000001754.606:19225): avc:  denied  { map } for  pid=31496 comm="syz.3.20283" path="socket:[196130]" dev="sockfs" ino=196130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  997.264052][   T28] audit: type=1400 audit(2000001754.656:19226): avc:  denied  { name_bind } for  pid=31499 comm="syz.1.20284" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  997.266090][T31494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  997.375133][   T28] audit: type=1400 audit(2000001754.786:19227): avc:  denied  { map } for  pid=31493 comm="syz.7.20279" path="/34/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  997.435709][T30638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.771186][   T28] audit: type=1400 audit(2000001755.186:19228): avc:  denied  { bind } for  pid=31523 comm="syz.8.20292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  997.792614][   T28] audit: type=1400 audit(2000001755.186:19229): avc:  denied  { name_bind } for  pid=31523 comm="syz.8.20292" src=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  997.815799][   T28] audit: type=1400 audit(2000001755.186:19230): avc:  denied  { node_bind } for  pid=31523 comm="syz.8.20292" src=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  997.895656][   T28] audit: type=1400 audit(2000001755.306:19231): avc:  denied  { write } for  pid=31533 comm="syz.3.20297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  997.931129][   T28] audit: type=1400 audit(2000001755.306:19232): avc:  denied  { getopt } for  pid=31538 comm="syz.3.20299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  997.934482][T31539] netlink: 'syz.3.20299': attribute type 16 has an invalid length.
[  998.021389][   T28] audit: type=1400 audit(2000001755.436:19233): avc:  denied  { mount } for  pid=31544 comm="syz.3.20301" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  998.070217][T31550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20302'.
[  998.087057][   T28] audit: type=1400 audit(2000001755.496:19234): avc:  denied  { mount } for  pid=31551 comm="syz.8.20303" name="/" dev="rpc_pipefs" ino=195162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  998.130537][T31554] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20304'.
[  998.140773][T31554] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20304'.
[  998.327881][T31558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  998.340839][T31558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  998.363032][T31571] SET target dimension over the limit!
[  998.439585][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  998.448521][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  998.457416][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  998.466292][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.087097][T31669] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20348'.
[ 1000.139612][T31669] bridge2: entered promiscuous mode
[ 1000.153808][T31669] bridge2: port 1(macvtap1) entered blocking state
[ 1000.166397][T31669] bridge2: port 1(macvtap1) entered disabled state
[ 1000.179416][T31669] macvtap1: entered allmulticast mode
[ 1000.189448][T31669] bridge2: entered allmulticast mode
[ 1000.200088][T31669] macvtap1: left allmulticast mode
[ 1000.208268][T31669] bridge2: left allmulticast mode
[ 1000.217786][T31669] bridge2: left promiscuous mode
[ 1000.344287][T31678] loop7: detected capacity change from 0 to 764
[ 1000.374072][T31678] iso9660: Unknown parameter '7ï†RåÓŽŠOÑY/lõ„&ø'ù4ÙÙ•×ÑþYÿÎÕç¨$ïÿ‰OͦW¤§Înq'
[ 1000.923156][T31705] lo speed is unknown, defaulting to 1000
[ 1001.271549][T31728] loop7: detected capacity change from 0 to 128
[ 1001.404046][T31735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20375'.
[ 1001.519311][T31740] lo speed is unknown, defaulting to 1000
[ 1001.937402][T31756] ref_ctr increment failed for inode: 0x2e79 offset: 0x7 ref_ctr_offset: 0x6f6c of mm: 0xffff888130bf0000
[ 1002.256173][T31763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20386'.
[ 1002.447731][   T28] kauditd_printk_skb: 39 callbacks suppressed
[ 1002.447812][   T28] audit: type=1400 audit(2000001759.856:19274): avc:  denied  { read } for  pid=31771 comm="syz.7.20389" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1002.517338][   T28] audit: type=1400 audit(2000001759.856:19275): avc:  denied  { open } for  pid=31771 comm="syz.7.20389" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1002.675544][   T28] audit: type=1326 audit(2000001760.086:19276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31775 comm="syz.2.20391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73b391c819 code=0x0
[ 1002.736806][T31780] netlink: 60 bytes leftover after parsing attributes in process `syz.7.20392'.
[ 1002.767191][   T28] audit: type=1400 audit(2000001760.176:19277): avc:  denied  { create } for  pid=31779 comm="syz.7.20392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1002.796782][T31780] syzkaller1: entered promiscuous mode
[ 1002.807992][T31780] syzkaller1: entered allmulticast mode
[ 1003.135466][T31794] netlink: 'syz.7.20398': attribute type 1 has an invalid length.
[ 1003.150391][T31794] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1003.264696][   T28] audit: type=1400 audit(2000001760.676:19278): avc:  denied  { connect } for  pid=31802 comm="syz.7.20401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1003.537559][   T28] audit: type=1400 audit(2000001760.946:19279): avc:  denied  { setopt } for  pid=31812 comm="syz.2.20406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1003.538240][T31816] loop7: detected capacity change from 0 to 512
[ 1003.585370][T31811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20404'.
[ 1003.599521][T31816] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1003.658802][T31816] EXT4-fs (loop7): 1 truncate cleaned up
[ 1003.688412][T31824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20409'.
[ 1003.706072][T31816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1003.755170][T31824] bridge0: entered promiscuous mode
[ 1003.761148][T31824] bridge0: port 1(macvtap1) entered blocking state
[ 1003.767762][T31824] bridge0: port 1(macvtap1) entered disabled state
[ 1003.774439][T31824] macvtap1: entered allmulticast mode
[ 1003.779817][T31824] bridge0: entered allmulticast mode
[ 1003.785688][T31824] macvtap1: left allmulticast mode
[ 1003.790891][T31824] bridge0: left allmulticast mode
[ 1003.796384][T31824] bridge0: left promiscuous mode
[ 1003.992525][T30638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1004.028427][   T28] audit: type=1400 audit(2000001761.436:19280): avc:  denied  { ioctl } for  pid=31832 comm="syz.8.20414" path="socket:[195540]" dev="sockfs" ino=195540 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1004.117643][T31841] lo speed is unknown, defaulting to 1000
[ 1004.124372][   T28] audit: type=1400 audit(2000001761.536:19281): avc:  denied  { ioctl } for  pid=31836 comm="syz.7.20413" path="socket:[195584]" dev="sockfs" ino=195584 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1004.191515][T31837] netlink: 108 bytes leftover after parsing attributes in process `syz.7.20413'.
[ 1004.223854][T31837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20413'.
[ 1005.786489][T31888] Process accounting resumed
[ 1006.695235][T31919] netlink: 5 bytes leftover after parsing attributes in process `syz.2.20443'.
[ 1006.811940][ T9413] Process accounting resumed
[ 1006.949359][T31929] lo speed is unknown, defaulting to 1000
[ 1007.122982][   T28] audit: type=1400 audit(2000001764.536:19282): avc:  denied  { watch } for  pid=31931 comm="syz.8.20449" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[ 1007.425302][T31943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20452'.
[ 1007.499482][T31943] bond7: entered promiscuous mode
[ 1007.504759][T31943] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1007.641455][T31957] futex_wake_op: syz.3.20454 tries to shift op by 144; fix this program
[ 1007.778058][   T28] audit: type=1400 audit(2000001765.186:19283): avc:  denied  { kexec_image_load } for  pid=31966 comm="syz.1.20460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[ 1007.845705][T31971] xt_CT: No such helper "snmp_trap"
[ 1008.215718][   T28] audit: type=1400 audit(2000001765.626:19284): avc:  denied  { read open } for  pid=31997 comm="syz.8.20470" path="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1008.284800][   T28] audit: type=1400 audit(2000001765.666:19285): avc:  denied  { watch } for  pid=31997 comm="syz.8.20470" path="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1009.088447][   T28] audit: type=1400 audit(2000001766.496:19286): avc:  denied  { read write } for  pid=32025 comm="syz.7.20480" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1009.140256][   T28] audit: type=1400 audit(2000001766.496:19287): avc:  denied  { open } for  pid=32025 comm="syz.7.20480" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1009.396826][   T28] audit: type=1400 audit(2000001766.806:19288): avc:  denied  { connect } for  pid=32034 comm="syz.8.20483" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1009.440592][   T28] audit: type=1400 audit(2000001766.836:19289): avc:  denied  { write } for  pid=32034 comm="syz.8.20483" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1009.840465][T32041] ==================================================================
[ 1009.848573][T32041] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[ 1009.856394][T32041] 
[ 1009.858723][T32041] write to 0xffffea000728c518 of 8 bytes by task 32037 on cpu 0:
[ 1009.866439][T32041]  __filemap_remove_folio+0x201/0x2e0
[ 1009.871846][T32041]  filemap_remove_folio+0x6d/0x1d0
[ 1009.876971][T32041]  truncate_inode_folio+0x42/0x50
[ 1009.881996][T32041]  shmem_undo_range+0x26d/0xb10
[ 1009.886849][T32041]  shmem_fallocate+0x881/0x920
[ 1009.891618][T32041]  vfs_fallocate+0x3b6/0x400
[ 1009.896204][T32041]  __x64_sys_fallocate+0x7a/0xd0
[ 1009.901145][T32041]  x64_sys_call+0x298e/0x3020
[ 1009.905823][T32041]  do_syscall_64+0x12c/0x3b0
[ 1009.910415][T32041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.916299][T32041] 
[ 1009.918614][T32041] read to 0xffffea000728c518 of 8 bytes by task 32041 on cpu 1:
[ 1009.926215][T32041]  folio_mapping+0xa1/0xe0
[ 1009.930608][T32041]  evict_folios+0x297c/0x3370
[ 1009.935260][T32041]  try_to_shrink_lruvec+0x858/0xc20
[ 1009.940439][T32041]  shrink_lruvec+0x256/0x1bc0
[ 1009.945102][T32041]  shrink_node+0x697/0x20a0
[ 1009.949579][T32041]  do_try_to_free_pages+0x408/0xc90
[ 1009.954762][T32041]  try_to_free_mem_cgroup_pages+0x201/0x420
[ 1009.960642][T32041]  try_charge_memcg+0x373/0xa10
[ 1009.965510][T32041]  __memcg_kmem_charge_page+0x1ce/0x3f0
[ 1009.971053][T32041]  __alloc_frozen_pages_noprof+0x18a/0x350
[ 1009.976856][T32041]  alloc_pages_mpol+0xb3/0x260
[ 1009.981614][T32041]  alloc_pages_noprof+0x8f/0x140
[ 1009.986556][T32041]  __vmalloc_node_range_noprof+0xaed/0x11c0
[ 1009.992439][T32041]  __kvmalloc_node_noprof+0x3d4/0x640
[ 1009.997803][T32041]  futex_hash_allocate+0x190/0x9a0
[ 1010.002905][T32041]  futex_hash_prctl+0xd8/0xf0
[ 1010.007570][T32041]  __se_sys_prctl+0x4f4/0x1400
[ 1010.012336][T32041]  __x64_sys_prctl+0x67/0x80
[ 1010.016920][T32041]  x64_sys_call+0x2533/0x3020
[ 1010.021589][T32041]  do_syscall_64+0x12c/0x3b0
[ 1010.026171][T32041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1010.032053][T32041] 
[ 1010.034357][T32041] value changed: 0xffff888115fec1e0 -> 0x0000000000000000
[ 1010.041442][T32041] 
[ 1010.043751][T32041] Reported by Kernel Concurrency Sanitizer on:
[ 1010.049888][T32041] CPU: 1 UID: 0 PID: 32041 Comm: syz.8.20484 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1010.060899][T32041] Tainted: [W]=WARN
[ 1010.064682][T32041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1010.074735][T32041] ==================================================================