last executing test programs:

8m27.903062502s ago: executing program 32 (id=72):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

8m21.969397469s ago: executing program 33 (id=167):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
bind$xdp(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

7m40.353646871s ago: executing program 34 (id=932):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0xaf, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x612}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xf, 0x9}}}}}]}}]}}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11)

5m17.922472401s ago: executing program 35 (id=3556):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

5m2.886497253s ago: executing program 5 (id=3773):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x40)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000004140)=""/4081, 0xfffffef3}, {0x0}, {&(0x7f00000003c0)=""/135, 0x87}], 0x3}}], 0x1, 0x102, 0x0)

5m2.700294328s ago: executing program 5 (id=3785):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4)
write$P9_RVERSION(r1, 0x0, 0x0)
dup2(r1, r0)

5m2.61263866s ago: executing program 5 (id=3788):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @void}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070fd541c6b0c5d95a2807000000", @ANYRES32=r3, @ANYBLOB="40005200060010"], 0x24}}, 0x0)

5m2.478698263s ago: executing program 5 (id=3790):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x2ce6, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x43})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5m1.37246441s ago: executing program 5 (id=3802):
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x3)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0xfffffffffffffffd], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40)

4m59.710683042s ago: executing program 5 (id=3828):
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38)

4m59.672318813s ago: executing program 36 (id=3828):
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38)

4m28.497751166s ago: executing program 8 (id=4278):
syz_usbip_server_init(0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m27.828404292s ago: executing program 8 (id=4288):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x4, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffff9, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x7, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x7fff, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x6, 0xb, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0x8, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x4ffffffffffffe, 0xe, 0x0, 0x1, 0x2300000006, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe7000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m27.657325117s ago: executing program 8 (id=4289):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

4m27.50563361s ago: executing program 8 (id=4290):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0xff, 0x0, &(0x7f0000000140))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040004)

4m27.026517232s ago: executing program 8 (id=4297):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f000057a000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0xb2993000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10)

4m26.571275684s ago: executing program 8 (id=4304):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m26.544374384s ago: executing program 37 (id=4304):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m32.409096735s ago: executing program 9 (id=5388):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000005d721bd81414bb0000000000000000000000a100280004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

3m32.25760497s ago: executing program 9 (id=5391):
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3, 0x0, 0x0, 0x0, 0x4000000}}, 0x18}}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain)
open(&(0x7f0000000240)='./file0\x00', 0xa0102, 0x91)

3m32.210687661s ago: executing program 9 (id=5394):
socket(0xa, 0x801, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040844)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b)

3m32.116610083s ago: executing program 9 (id=5395):
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})

3m31.932028547s ago: executing program 9 (id=5399):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)

3m31.522562577s ago: executing program 9 (id=5403):
getpid()
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
unshare(0x22020600)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r3 = syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
syz_clone3(&(0x7f0000000980)={0x200000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r3, r3], 0x2, {r1}}, 0x58)

3m31.522447057s ago: executing program 38 (id=5403):
getpid()
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
unshare(0x22020600)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r3 = syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
syz_clone3(&(0x7f0000000980)={0x200000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r3, r3], 0x2, {r1}}, 0x58)

3m12.353037052s ago: executing program 0 (id=5706):
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x2c, r2, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000)

3m12.254021395s ago: executing program 0 (id=5709):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'bond_slave_1\x00', @random="0131014030d9"})

3m12.004973032s ago: executing program 0 (id=5712):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x88a, &(0x7f00000000c0)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@resuid}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x470, &(0x7f0000000500)="$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")
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f636f6d70726573739cdf4bbd3c08fe226865636b3d7374726963742c6d6f64653d30783030303030303030303030303030306f64653d3078303030303030303030303030306137632c757466382c757466e74632eba896382ebc4ae78d89"], 0x0, 0x569, &(0x7f0000000200)="$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")

3m11.372946057s ago: executing program 0 (id=5719):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')

3m11.291589979s ago: executing program 0 (id=5721):
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdff, 0x0, @perf_bp={0x0}, 0x3900, 0x5, 0x8000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket(0x1, 0x80802, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
shutdown(r0, 0x0)
gettid()
syz_open_dev$usbfs(&(0x7f0000000100), 0x6f, 0x100)

3m10.660024645s ago: executing program 0 (id=5733):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000005c0)={[{@init_itable_val}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r0, &(0x7f0000000000)={0x7, 0x20000}, &(0x7f0000000140), 0x0)

3m10.645325885s ago: executing program 39 (id=5733):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000005c0)={[{@init_itable_val}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r0, &(0x7f0000000000)={0x7, 0x20000}, &(0x7f0000000140), 0x0)

2m41.755015611s ago: executing program 4 (id=6152):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
sendmsg$xdp(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40855)

2m41.653685493s ago: executing program 4 (id=6163):
socket$kcm(0x2, 0xa, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket(0x11, 0x3, 0x8)

2m41.453431139s ago: executing program 4 (id=6155):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setreuid(0x0, 0xee00)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4)
listen(r1, 0x7)

2m41.41513771s ago: executing program 4 (id=6156):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
umount2(0x0, 0xb)

2m41.414640439s ago: executing program 4 (id=6157):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)

2m41.217398844s ago: executing program 4 (id=6161):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f00000010c0), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000)
r2 = accept4$unix(r0, 0x0, 0x0, 0x80000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
recvfrom$unix(r2, &(0x7f0000000140)=""/243, 0x40000, 0x40000000, 0x0, 0x0)

2m41.182674045s ago: executing program 40 (id=6161):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f00000010c0), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000)
r2 = accept4$unix(r0, 0x0, 0x0, 0x80000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
recvfrom$unix(r2, &(0x7f0000000140)=""/243, 0x40000, 0x40000000, 0x0, 0x0)

3.565330911s ago: executing program 3 (id=8459):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xffffbffd, 0x200, 0x0, 'queue1\x00', 0x1})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==")
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000005c0)={[{@init_itable_val}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x20000}, &(0x7f0000000140), 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
fsopen(&(0x7f0000000940)='hostfs\x00', 0x0)

3.21879068s ago: executing program 7 (id=8461):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x22020400)
fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x3c, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2a1, 0x0, 0x10000]}})
r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, 0x0)

3.073749724s ago: executing program 7 (id=8462):
r0 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc03, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
ioctl$TIOCGETD(r1, 0x80045440, 0xfffffffffffffffe)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x1ffffffffffffccf, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='\x89]%\x90\xbbB\xbeL!\x96\x9c\xc2\x81\xc3\xf5\xcc\x8c\tv\xc4E\x10\x9c\xa4guX\xd3\x9a\xb1\x1d\xcdf\f\x8e&_\xc0\xf1\x05\x91\xd7!\v\xca \xc97\xfa<\xd5\x9d\x13\x19\xf2\xd3\xbe.\x15\x88\xa1g\v::\xff\xe1(\xb4\x18[\xa5\"\x1b\x91\xea\xfa\x1a\fa\xf18\x8ax\xe8]\xa4\x91\x03m\xdb\xd5s\x18wy\xde\x89\x9c\v\xcek\xd3V\xa0\xb3\xfbA\xd5g\xdde\xeb\xeb\xa6\xd1\xc29\xa8\xe8HD\xc9J\xef\x16\xae\xa8\"\x007\a\xcb\xb0\xd9\xd7\xda\xfe\xcb\xbc\x15 D\x84`\x1f')
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2.762546231s ago: executing program 2 (id=8465):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000540)={@private0, 0x802, 0x0, 0xff, 0x9, 0xa4, 0x43}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xd766fc1818362d80, @perf_bp={&(0x7f0000000580), 0x1}, 0x0, 0x0, 0x22, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/118)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
r0 = msgget$private(0x0, 0x208)
msgsnd(r0, &(0x7f0000002880)=ANY=[@ANYBLOB="01"], 0x8, 0x800)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100))
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
msgrcv(r0, &(0x7f0000000440)={0x0, ""/247}, 0xff, 0x0, 0x2800)

2.566623386s ago: executing program 2 (id=8467):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
unshare(0x48000000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)

2.566311876s ago: executing program 1 (id=8468):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x44, '\x00', 0x0, @fallback=0x6}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', 0x0})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x7f, 0x8}, 0xc)
r0 = creat(0x0, 0xdafbe5d6891b6e4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_elf32(r0, 0x0, 0x58)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000c5d0cdf8e79667d6ace7842bc5adb1e9152d9bb1503350fb5a70b048ede136a4ba3b6485d4cfbf8665106eed2d21e8c0a6f993b17a4efc5c25d08e09ad5851fd0cca1f83adef09a4992cc5f50a05b19e956093b87c7a14d1dfceb6e8c07991e9d92cc67e28dafb3f90ba7524bd7cdc7469f075e71dad07e4f8ff5c5e98a62a86f3e79d77ae0c2290c1c5eefc2068b4d70b550f98bbe874f95d79dcb9aece64d042b0a3bc8f4af007103b9642e79e391621855984e7c2c69be661f867c0818dcf674b142568ffec6304cc5061320e65a9"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

1.927097632s ago: executing program 6 (id=8474):
r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x2fb})
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r1, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r3, 0x1)
r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r5, 0x1)
flock(r4, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.926538102s ago: executing program 7 (id=8475):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
read$msr(r0, &(0x7f00000002c0)=""/108, 0x6c)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYBLOB])
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001a300000000fffff4ffffffff", @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)

1.683751528s ago: executing program 6 (id=8476):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x404, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7ffb}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000015e000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.390540135s ago: executing program 6 (id=8477):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket(0x28, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.334600667s ago: executing program 7 (id=8478):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x300)

1.322753827s ago: executing program 7 (id=8479):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0)

1.095215003s ago: executing program 6 (id=8480):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0])
socket$netlink(0x10, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r3, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14)

1.029106334s ago: executing program 6 (id=8481):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x401}, 0x40, 0x0, 0x0, 0x0, 0xa, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.028749634s ago: executing program 1 (id=8482):
socket$inet6(0xa, 0x1, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

830.583659ms ago: executing program 2 (id=8483):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x9, 0x7, 0x2, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7030d5fa04d88a206a2aa2b67cd856b6d4c110653e110c63d6b023bf103a1ca50501a95614744d16c4d3aa516937e02b04bb1b195370c4657c6257d9c33932e5b421f8754e690d70f808e012b3c0e61243e293e9c4f26cacf94115431dde3edabdab5ad45ea9084648c2fee4125a596392b5622cb0ba83089ae7606a8dac13f93163e5a78d2edfa466e93dac1776f86a78510564987c808164ae8021a155de9a1326648682c43e34eacc91d90ba5555a54224fa", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000e0601010000000000000000010000070900020073797a3000000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

816.77313ms ago: executing program 6 (id=8484):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$eJzs3E9rE2sUx/HTpk3TlDa5cLlwBfWgG92ENr4ADdKCGFBqU9SFMLUTDRmTMhMqEbHZiFtfR3HpTlBfgN2IG3HrrgiCmy7Ekc6fmrRpzZ+2SdvvB8o8mWd+PKfTaTlTmFm//fJRMe+k8kZFBmMqgyI12RBJbo4CA8F20BtHpV5NLo79+Hz61p271zPZ7PSs6kxm7lJaVSfOvn389NW595Wx+dcTb0ZkLXlv/Xv669p/a/+v/5p7WHCGxdFSuaKGLpTLFWPBMnWx4BRTqjct03BMLZQc026Yz1vlpaWqGqXF8fiSbTqOGqWqFs2qVspasatqPDAKJU2lUjoel5Mi0XTvUAvJ3OrsrJHZddqNdFEVemC02U7bztSaT+ZWD6EmAADQZ/bu//1ef/f+Pzvvbzvq/7WwW/8v0nX//yF6+OfyKKg1fPpL/x9qfoMR27eicKBsO2PEg9/fRvT/AAAAAAAAAAAAAAAAAAAAAAAcBRuum3BdNxFuw6+R4AGP8HOv68TBaPPnH74Q4HIPS8Y+qntwLyZivVjOLef8rT+fyUtBLDFlUhLy07seAv545lp2elI9SXlnrQT5leVcRDavoUxUCluLJcP8gPcYmp8/88+Un9fG/LDE69dPS0L+bb5+umk+KhfO1+VTkpCP96UsliyKfAkuaC//bEr16o3stvzo5nEAAAAAABwLKd2y4/7dm/cOiMnOeT/fxv8Htt1fD8mpVl5RCQAAAAAAuuZUnxQNyzLtDgYjItJF/LgOItIXZWwbXBGRTuLxfii+/UFMRPw92kn821a8pZTbwjFDItLz09LGoNd/mQAAAADstz9NfxuhT88PsCIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6eVt8HFh6/Yyqc2CNet1zk0L9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoI/8DgAA///REBf+")
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7)
connect$inet(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

534.230026ms ago: executing program 1 (id=8485):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x1}})
ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01000000"], 0x18)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xa, 0x0, 0x0, 0x2, 0x2914000000000, 0x0, 0x5, 0xfffffffffffffffb}, {0x5, 0x40000000000000, 0x1fffffffffffffd}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)

518.993377ms ago: executing program 2 (id=8486):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

314.312102ms ago: executing program 2 (id=8487):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
read$msr(r0, &(0x7f00000002c0)=""/108, 0x6c)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x9, 0x3, 0x1, 0xf8c, 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f"], 0xfe33)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)

314.101342ms ago: executing program 7 (id=8488):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r2, 0x2)
flock(r2, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r3, 0x1)

309.142702ms ago: executing program 3 (id=8489):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_delete(r0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5)
syz_genetlink_get_family_id$team(&(0x7f0000000140), r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0)

175.493785ms ago: executing program 1 (id=8490):
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@loopback}}, {{@in6=@private2}, 0x0, @in=@loopback}}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x1000010, &(0x7f00000004c0)={[{@quota}, {@huge_always}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]})
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fallocate(r2, 0x0, 0x4, 0x88ffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r3, 0x0, 0x0, 0x5412, 0x0, 0x0)

116.178427ms ago: executing program 3 (id=8491):
socket$can_j1939(0x1d, 0x2, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

115.775737ms ago: executing program 3 (id=8492):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x521040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x2000006, 0x10003)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x13, r1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)

111.861257ms ago: executing program 1 (id=8493):
r0 = socket$inet(0x2, 0x5, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x30)
r1 = timerfd_create(0x1, 0x1000)
timerfd_settime(r1, 0x1, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000196c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)

50.561598ms ago: executing program 3 (id=8494):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a", 0x9}], 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

46.850658ms ago: executing program 1 (id=8495):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r5, 0xffffffffffffffff, 0x0)

46.613689ms ago: executing program 3 (id=8496):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x5, 0x5, 0x8003, 0xfffc, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
alarm(0x1)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
alarm(0x4000000005)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
timer_settime(0x0, 0x1, 0x0, 0x0)
syncfs(r1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x33, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)

0s ago: executing program 2 (id=8497):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 failed with errno=-22
[  406.158147][T24094] lo speed is unknown, defaulting to 1000
[  406.318911][T24115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6448'.
[  406.343582][T24115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6448'.
[  406.823361][T24133] netlink: 127592 bytes leftover after parsing attributes in process `syz.6.6456'.
[  407.022373][T24136] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å	) failed with errno=-22
[  407.079109][T24139] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  407.091819][T24139] batman_adv: batadv0: Adding interface: gretap2
[  407.101757][T24139] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.139985][T24139] batman_adv: batadv0: Interface activated: gretap2
[  408.251930][T24157] netlink: 'syz.3.6465': attribute type 1 has an invalid length.
[  408.260619][   T28] audit: type=1400 audit(1785338554.345:3371): avc:  denied  { read write } for  pid=24152 comm="syz.7.6462" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  408.343243][   T28] audit: type=1400 audit(1785338554.345:3372): avc:  denied  { open } for  pid=24152 comm="syz.7.6462" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  408.362577][T24157] 8021q: adding VLAN 0 to HW filter on device bond1
[  408.452021][T24171] netlink: 'syz.2.6471': attribute type 10 has an invalid length.
[  408.468830][T24157] bond1: (slave geneve2): making interface the new active one
[  408.538655][T24157] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  408.955964][T24171] team0: Port device vlan1 added
[  409.622556][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6499'.
[  410.010660][T24246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6504'.
[  410.046034][T24248] loop7: detected capacity change from 0 to 128
[  410.115596][T24252] netlink: 'syz.3.6505': attribute type 4 has an invalid length.
[  410.134087][T24248] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  410.143487][T24252] netlink: 'syz.3.6505': attribute type 1 has an invalid length.
[  410.162430][T24248] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  410.188458][T24252] netlink: 61175 bytes leftover after parsing attributes in process `syz.3.6505'.
[  410.307298][T23062] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  410.361253][   T28] audit: type=1326 audit(1785338556.301:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.2.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  410.389912][   T28] audit: type=1326 audit(1785338556.311:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.2.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  410.426972][   T28] audit: type=1326 audit(1785338556.311:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.2.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  410.470870][   T28] audit: type=1326 audit(1785338556.404:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.2.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  410.496921][   T28] audit: type=1326 audit(1785338556.404:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.2.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  410.516467][T24272] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6512'.
[  410.608334][T24283] netlink: 'syz.1.6518': attribute type 3 has an invalid length.
[  410.616757][T24283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6518'.
[  410.701209][   T28] audit: type=1326 audit(1785338556.629:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24287 comm="syz.1.6520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  410.776081][   T28] audit: type=1326 audit(1785338556.629:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24287 comm="syz.1.6520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  410.990378][T24295] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å	) failed with errno=-22
[  411.002298][T24307] syzkaller1: entered promiscuous mode
[  411.014003][T24307] syzkaller1: entered allmulticast mode
[  411.259792][T24314] gretap1: entered promiscuous mode
[  411.451224][T24331] netlink: 11575 bytes leftover after parsing attributes in process `syz.6.6546'.
[  411.486930][T24331] netlink: 116 bytes leftover after parsing attributes in process `syz.6.6546'.
[  411.630189][T24343] netlink: 'syz.6.6541': attribute type 1 has an invalid length.
[  411.673203][T24343] bond1: entered promiscuous mode
[  411.706095][T24343] 8021q: adding VLAN 0 to HW filter on device bond1
[  411.770794][T24348] bond1: (slave ip6gre1): refused to change device type
[  412.045770][T24374] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.094640][T24366] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  412.131828][   T28] kauditd_printk_skb: 101 callbacks suppressed
[  412.131918][   T28] audit: type=1400 audit(1785338557.967:3481): avc:  denied  { write } for  pid=24361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.234264][   T28] audit: type=1400 audit(1785338558.051:3482): avc:  denied  { write } for  pid=24382 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.475834][T24405] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6557'.
[  412.603769][   T28] audit: type=1400 audit(1785338558.407:3483): avc:  denied  { write } for  pid=24395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.702484][   T28] audit: type=1400 audit(1785338558.491:3484): avc:  denied  { write } for  pid=24415 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.836686][T24423] bridge3: entered promiscuous mode
[  412.848197][T24423] bridge3: entered allmulticast mode
[  412.932399][T24427] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  413.028571][T24441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6567'.
[  413.138750][T24448] 0ªî{X¹¦: left allmulticast mode
[  413.170933][T24448] bridge1: left allmulticast mode
[  413.177207][T24448] tipc: Resetting bearer <eth:syzkaller0>
[  413.269409][T24448] bond3: left promiscuous mode
[  413.274496][T24448] veth13: left promiscuous mode
[  413.381716][T24448] batman_adv: batadv0: Interface deactivated: gretap2
[  413.926871][T24478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6590'.
[  413.973814][T24483] smc: removing ib device syz1
[  414.829435][   T28] audit: type=1326 audit(1785338560.484:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.2.6593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x0
[  414.972713][T24517] __nla_validate_parse: 2 callbacks suppressed
[  414.972735][T24517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6596'.
[  415.096831][T24517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6596'.
[  415.362260][T24550] loop7: detected capacity change from 0 to 1024
[  415.403404][T24550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.646393][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.678171][   T28] audit: type=1400 audit(1785338561.280:3486): avc:  denied  { map } for  pid=24564 comm="syz.7.6617" path="pipe:[66465]" dev="pipefs" ino=66465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  415.800011][   T28] audit: type=1326 audit(1785338561.392:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24562 comm="syz.3.6616" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x0
[  415.888491][T24572] netlink: 'syz.7.6620': attribute type 1 has an invalid length.
[  415.905849][T24572] 8021q: adding VLAN 0 to HW filter on device bond1
[  415.916130][   T28] audit: type=1326 audit(1785338561.504:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24562 comm="syz.3.6616" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  415.950046][T24572] bond1: (slave dummy0): making interface the new active one
[  415.960032][T24572] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  415.972895][   T28] audit: type=1326 audit(1785338561.504:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24562 comm="syz.3.6616" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  415.991937][T24572] 
: renamed from dummy0 (while UP)
[  416.000685][   T28] audit: type=1326 audit(1785338561.504:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24562 comm="syz.3.6616" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  416.086691][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6624'.
[  416.119965][ T6070] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  416.128408][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6624'.
[  416.138690][ T6070] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  416.158113][ T6070] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  416.169218][ T6070] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  416.318978][T24599] xt_hashlimit: size too large, truncated to 1048576
[  416.442162][T24612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6630'.
[  416.459976][T24612] bond4: entered promiscuous mode
[  416.477176][T24612] 8021q: adding VLAN 0 to HW filter on device bond4
[  416.509625][T24612] bridge2: entered promiscuous mode
[  416.525025][T24612] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  416.646311][T24627] bond7: entered allmulticast mode
[  416.681350][T24627] macvlan0: entered promiscuous mode
[  416.693881][T24627] macvlan0: entered allmulticast mode
[  416.709514][T24627] bond7: (slave macvlan0): Opening slave failed
[  416.807127][T24643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6651'.
[  416.896614][T24644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6641'.
[  416.989763][T24646] loop7: detected capacity change from 0 to 512
[  417.014597][T24646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  417.104601][T24646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.126926][T24646] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  417.186092][T24646] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å	) failed with errno=-22
[  417.210868][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.361590][T24668] netlink: 'syz.2.6652': attribute type 1 has an invalid length.
[  417.376934][T24668] 8021q: adding VLAN 0 to HW filter on device bond6
[  417.402387][T24668] bond6: (slave veth17): Enslaving as a backup interface with a down link
[  417.426739][T24668] bond6: (slave dummy0): Enslaving as a backup interface with an up link
[  417.445307][T24668] netlink: 'syz.2.6652': attribute type 10 has an invalid length.
[  417.453341][T24668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6652'.
[  417.462709][T24668] dummy0: entered promiscuous mode
[  417.469493][T24668] bond6: (slave dummy0): Releasing backup interface
[  417.977425][   T28] kauditd_printk_skb: 356 callbacks suppressed
[  417.977445][   T28] audit: type=1326 audit(1785338563.432:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24696 comm="syz.3.6663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f853a9bdf99 code=0x0
[  418.858909][T24718] syzkaller0: Caught tx_queue_len zero misconfig
[  418.887848][T24719] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6671'.
[  418.917220][T24719] bond2: entered promiscuous mode
[  418.941979][T24719] 8021q: adding VLAN 0 to HW filter on device bond2
[  418.988585][   T28] audit: type=1326 audit(1785338564.387:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24726 comm="syz.1.6674" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x0
[  419.031833][T24725] bridge4: entered promiscuous mode
[  419.058027][T24725] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  419.353658][T24741] loop7: detected capacity change from 0 to 4096
[  419.377909][T24741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.432758][   T28] audit: type=1400 audit(1785338564.798:3849): avc:  denied  { write } for  pid=24740 comm="syz.7.6679" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.790991][ T4160] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:5075: inode #15: block 16: len 242: ext4_ext_map_blocks returned -28
[  419.814583][ T4160] EXT4-fs (loop7): failed to convert unwritten extents to written extents -- potential data loss!  (inode 15, error -28)
[  419.891381][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.336620][T24822] netlink: 'syz.1.6711': attribute type 1 has an invalid length.
[  421.388297][T24822] 8021q: adding VLAN 0 to HW filter on device bond8
[  421.478669][T24822] bond8: (slave geneve3): making interface the new active one
[  421.510391][T24822] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  421.633870][T24844] loop7: detected capacity change from 0 to 8192
[  422.186144][T24872] tipc: Started in network mode
[  422.196672][T24872] tipc: Node identity 8e7cc510ecf4, cluster identity 4711
[  422.205830][T24872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.277452][T24872] syzkaller0: entered promiscuous mode
[  422.286387][T24872] syzkaller0: entered allmulticast mode
[  422.293584][T24872] tipc: Resetting bearer <eth:syzkaller0>
[  422.307813][T24871] tipc: Resetting bearer <eth:syzkaller0>
[  422.335510][T24871] tipc: Disabling bearer <eth:syzkaller0>
[  422.904094][T24905] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6744'.
[  423.267049][T24917] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6751'.
[  423.432735][T24938] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6760'.
[  423.449759][T24945] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6762'.
[  423.706295][T24961] netlink: 'syz.2.6769': attribute type 1 has an invalid length.
[  423.728669][T24961] 8021q: adding VLAN 0 to HW filter on device bond7
[  424.420647][T25005] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  424.433748][   T28] audit: type=1400 audit(1785338569.477:3850): avc:  denied  { getopt } for  pid=24997 comm="syz.3.6782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  424.470288][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6786'.
[  424.479728][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6786'.
[  424.885275][T24964] geneve1: left promiscuous mode
[  424.930243][T24964] bond2: left promiscuous mode
[  424.935390][T24964] ip6gre1: left promiscuous mode
[  424.946582][T24964] gretap1: left promiscuous mode
[  424.994277][T24964] erspan0: left allmulticast mode
[  424.999891][T24964] macvtap1: left promiscuous mode
[  425.005060][T24964] macvtap1: left allmulticast mode
[  425.012849][T24964] bond3: left promiscuous mode
[  425.017787][T24964] vti0: left promiscuous mode
[  425.027779][T24964] team0: left promiscuous mode
[  425.032871][T24964] team0: left allmulticast mode
[  425.038606][T24964] bridge1: left promiscuous mode
[  425.043605][T24964] bridge1: left allmulticast mode
[  425.065814][T24964] bond5: left promiscuous mode
[  425.088824][T24964] bond7: left allmulticast mode
[  425.098856][T24992] syz_tun: entered allmulticast mode
[  425.107825][T24992] syz_tun: left allmulticast mode
[  425.118754][T24993] syz_tun: entered allmulticast mode
[  425.139908][ T6070] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  425.165510][ T6070] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.186806][ T6070] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  425.201706][ T6070] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  425.211302][ T6070] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.220503][ T6070] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  425.251863][ T6070] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  425.297489][ T6070] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.329998][ T6070] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  425.378284][ T6070] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  425.422251][   T28] audit: type=1400 audit(1785338570.404:3851): avc:  denied  { write } for  pid=25023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.424719][ T6070] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.468575][ T6070] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  425.489113][   T28] audit: type=1400 audit(1785338570.460:3852): avc:  denied  { write } for  pid=25044 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.817760][   T28] audit: type=1326 audit(1785338570.778:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25073 comm="syz.6.6807" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f154532df99 code=0x0
[  426.265223][T25082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6810'.
[  426.274443][T25082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6810'.
[  426.278363][T25080] loop7: detected capacity change from 0 to 512
[  426.299027][T25080] msdos: Unknown parameter ''
[  426.780923][T25099] loop7: detected capacity change from 0 to 512
[  426.796235][T25099] ext4: Unknown parameter 'nomblk_io_submit.mb_optimize_scan'
[  426.859590][T25099] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6817'.
[  427.310715][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6824'.
[  427.658645][T25104] loop7: detected capacity change from 0 to 4096
[  427.761704][T25104] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.817389][   T28] audit: type=1400 audit(1785338572.640:3854): avc:  denied  { write } for  pid=25103 comm="syz.7.6819" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  428.122535][   T28] audit: type=1400 audit(1785338572.921:3855): avc:  denied  { write } for  pid=25159 comm="syz.3.6842" name="header" dev="configfs" ino=59377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  428.171433][   T28] audit: type=1400 audit(1785338572.921:3856): avc:  denied  { write } for  pid=25159 comm="syz.3.6842" name="ss" dev="configfs" ino=59387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  428.213182][   T28] audit: type=1400 audit(1785338572.921:3857): avc:  denied  { write } for  pid=25159 comm="syz.3.6842" name="ss" dev="configfs" ino=59387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  428.248294][T25166] netlink: 'syz.6.6845': attribute type 1 has an invalid length.
[  428.272803][T25166] netlink: 'syz.6.6845': attribute type 2 has an invalid length.
[  428.283358][T25166] __nla_validate_parse: 1 callbacks suppressed
[  428.283399][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6845'.
[  428.415632][T25140] Set syz1 is full, maxelem 65536 reached
[  428.432950][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.986086][T25208] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.6863'.
[  429.060435][T25210] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6864'.
[  429.167663][T25212] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6865'.
[  429.197668][T25212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  429.227726][   T28] audit: type=1400 audit(1785338573.950:3858): avc:  denied  { nlmsg_write } for  pid=25213 comm="syz.2.6866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  429.278290][   T28] audit: type=1400 audit(1785338573.950:3859): avc:  denied  { audit_write } for  pid=25213 comm="syz.2.6866" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  429.342114][T25222] loop7: detected capacity change from 0 to 512
[  429.366237][T25222] EXT4-fs (loop7): external journal device major/minor numbers have changed
[  429.375511][T25222] EXT4-fs (loop7): failed to open journal device unknown-block(8,0) -EBUSY
[  429.413202][T25222] bridge_slave_1: default FDB implementation only supports local addresses
[  429.526368][T25231] xt_hashlimit: size too large, truncated to 1048576
[  429.551120][T25233] loop9: detected capacity change from 0 to 7
[  429.590659][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  429.600307][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  429.610351][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  429.620007][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  429.627938][T25233]  loop9: unable to read partition table
[  429.658407][T25233] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  429.723274][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  429.732959][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  429.742615][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  429.752278][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  429.761008][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  429.770823][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  429.778925][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  429.788573][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  429.799325][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  429.808954][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  430.653972][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  430.653990][   T28] audit: type=1400 audit(1785338575.298:3861): avc:  denied  { accept } for  pid=25274 comm="syz.7.6889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  430.727143][T25279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6892'.
[  430.747083][T25279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6892'.
[  430.842700][T25288] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6895'.
[  431.249471][T25301] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6901'.
[  431.339953][T25309] syzkaller0: left promiscuous mode
[  431.357717][T25309] syzkaller0: left allmulticast mode
[  431.694223][   T28] audit: type=1107 audit(1785338576.271:3862): pid=25337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  431.746324][   T28] audit: type=1400 audit(1785338576.327:3863): avc:  denied  { mounton } for  pid=25341 comm="syz.1.6918" path="/file0" dev="ramfs" ino=70571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  432.510421][   T28] audit: type=1400 audit(1785338577.039:3864): avc:  denied  { firmware_load } for  pid=25363 comm="syz.2.6927" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  432.620706][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6928'.
[  432.638388][T25369] 8021q: adding VLAN 0 to HW filter on device bond8
[  432.681167][T25369] ipvlan2: entered allmulticast mode
[  432.687010][T25369] bond8: entered allmulticast mode
[  432.698549][T25369] bond8: (slave ipip1): refused to change device type
[  433.813705][T25387] loop7: detected capacity change from 0 to 512
[  433.874565][T25387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.881558][T25393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6938'.
[  433.896476][T25387] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  433.910478][T25393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6938'.
[  433.926858][   T28] audit: type=1400 audit(1785338578.367:3865): avc:  denied  { write } for  pid=25385 comm="syz.7.6937" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  434.078711][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.126756][T25406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6952'.
[  434.139980][ T3430] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  434.152005][T25406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6952'.
[  434.161724][ T3430] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  434.178195][T25411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6945'.
[  434.182918][ T3430] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  434.220485][ T3430] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  434.829528][T25447] tipc: Failed to remove unknown binding: 66,0,0/2099199:3326029684/3326029686
[  434.843404][T25450] tipc: Started in network mode
[  434.848771][T25447] tipc: Failed to remove unknown binding: 66,0,0/2099199:3326029684/3326029685
[  434.858925][T25450] tipc: Node identity 7622ee3392f, cluster identity 4711
[  434.871989][T25450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.942258][T25456] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  435.389507][T25479] netlink: 'syz.2.6975': attribute type 1 has an invalid length.
[  435.458883][T25479] 8021q: adding VLAN 0 to HW filter on device bond10
[  435.469216][T25479] bond9: (slave bond10): making interface the new active one
[  435.475809][T25492] loop7: detected capacity change from 0 to 512
[  435.483243][T25479] bond9: (slave bond10): Enslaving as an active interface with an up link
[  435.489988][T25492] EXT4-fs: Ignoring removed nobh option
[  435.499134][T25492] EXT4-fs: Ignoring removed bh option
[  435.508810][T25493] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  435.520368][T25493] bond11 (unregistering): Released all slaves
[  435.531965][T25492] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  435.539422][T25481] lo speed is unknown, defaulting to 1000
[  435.557473][T25492] EXT4-fs (loop7): 1 truncate cleaned up
[  435.565265][T25498] netlink: 'syz.3.6981': attribute type 1 has an invalid length.
[  435.567832][T25492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.599360][T25492] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  435.618282][T25498] 8021q: adding VLAN 0 to HW filter on device bond2
[  435.626419][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.695873][T25498] bond2: (slave gretap2): making interface the new active one
[  435.705527][T25498] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  436.063251][ T9111] tipc: Node number set to 3839028787
[  437.390639][T25583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7014'.
[  438.052047][T25613] sock: sock_set_timeout: `syz.7.7025' (pid 25613) tries to set negative timeout
[  438.069312][   T28] audit: type=1400 audit(1785339094.286:3866): avc:  denied  { ioctl } for  pid=25612 comm="syz.7.7025" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  438.140461][T25616] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7026'.
[  438.280651][   T28] audit: type=1107 audit(1785339094.492:3867): pid=25623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  438.693382][T25654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7043'.
[  438.724430][   T28] audit: type=1400 audit(1785339094.894:3868): avc:  denied  { getopt } for  pid=25652 comm="syz.7.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  438.773832][   T28] audit: type=1107 audit(1785339094.950:3869): pid=25655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  439.231601][T25691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7056'.
[  439.262729][T25691] 8021q: adding VLAN 0 to HW filter on device bond9
[  439.280300][T25691] ipvlan0: entered allmulticast mode
[  439.285834][T25691] bond9: entered allmulticast mode
[  439.296495][T25691] bond9: (slave ipip2): refused to change device type
[  439.745886][T25703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7063'.
[  439.762234][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7063'.
[  439.781078][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7063'.
[  439.818203][T25708] netlink: 'syz.1.7065': attribute type 3 has an invalid length.
[  439.827399][T25708] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.7065'.
[  440.224633][T25727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7073'.
[  440.245597][T25727] 8021q: adding VLAN 0 to HW filter on device bond3
[  440.267414][T25727] ipvlan0: entered allmulticast mode
[  440.273084][T25727] bond3: entered allmulticast mode
[  440.285312][T25727] bond3: (slave ipip0): refused to change device type
[  440.518672][T25750] netlink: 168 bytes leftover after parsing attributes in process `syz.7.7082'.
[  442.162226][T25808] loop7: detected capacity change from 0 to 512
[  442.233652][T25808] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7106: bg 0: block 393: padding at end of block bitmap is not set
[  442.262015][T25808] loop7: lost filesystem error report for type 5 error -117
[  442.265311][T25808] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  442.273195][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  442.273240][    C0] EXT4-fs (loop7): initial error at time 1785339098: ext4_validate_block_bitmap:441
[  442.273358][    C0] EXT4-fs (loop7): last error at time 1785339098: ext4_validate_block_bitmap:441
[  442.332822][T25808] loop7: lost filesystem error report for type 5 error -117
[  442.334461][T25808] EXT4-fs (loop7): 2 truncates cleaned up
[  442.407155][T25808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.462597][   T28] audit: type=1400 audit(1785339098.394:3870): avc:  denied  { write } for  pid=25806 comm="syz.7.7106" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  442.522145][T25825] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  442.531654][   T28] audit: type=1400 audit(1785339098.394:3871): avc:  denied  { create } for  pid=25806 comm="syz.7.7106" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  442.580164][   T28] audit: type=1400 audit(1785339098.403:3872): avc:  denied  { write } for  pid=25806 comm="syz.7.7106" name=E91F7189591E9233614B dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  442.582696][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.617759][T25827] ref_ctr increment failed for inode: 0x1e27 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119f86900
[  442.648309][T25826] uprobe: syz.1.7114:25826 failed to unregister, leaking uprobe
[  443.026211][T25874] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.7134'.
[  443.114516][T25881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7137'.
[  443.190031][T25896] team0: Device xfrm0 is of different type
[  443.209974][T25896] tipc: Enabled bearer <eth:team0>, priority 0
[  443.364662][  T290] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  443.374481][  T290] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  443.410177][  T290] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  443.438582][  T290] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  443.950443][T25933] dummy0: left promiscuous mode
[  444.265380][T25933] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  444.277310][T25933] veth0_to_team: entered promiscuous mode
[  444.287235][T25933] 8021q: adding VLAN 0 to HW filter on device bond9
[  444.330845][T25941] tipc: Cannot configure node identity twice
[  444.347614][T25944] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[  444.360450][  T290] bond6: (slave veth17): link status definitely up, 10000 Mbps full duplex
[  444.389522][  T290] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  444.409009][T25950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.420495][  T290] bond6: active interface up!
[  444.431627][T25950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.832002][T25962] macvlan0: entered promiscuous mode
[  444.837519][T25962] bridge0: entered promiscuous mode
[  444.899573][T25966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  445.196343][T25988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7176'.
[  445.443325][T26000] sctp: [Deprecated]: syz.1.7182 (pid 26000) Use of struct sctp_assoc_value in delayed_ack socket option.
[  445.443325][T26000] Use struct sctp_sack_info instead
[  445.449360][T26002] netlink: 'syz.7.7181': attribute type 11 has an invalid length.
[  445.501797][ T9111] page_pool_release_retry() stalled pool shutdown: id 122, 1 inflight 242 sec
[  445.541099][ T9111] tipc: Node number set to 769922766
[  446.006174][T26013] 9pnet_fd: p9_fd_create_tcp (26013): problem connecting socket to 127.0.0.1
[  446.358119][T26018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7188'.
[  446.593641][   T28] audit: type=1326 audit(1785339102.268:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26025 comm="syz.3.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f853a9bdf99 code=0x0
[  447.255041][   T28] audit: type=1400 audit(1785339102.886:3874): avc:  denied  { sys_admin } for  pid=26041 comm="syz.6.7196" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  447.276518][T26042] lo speed is unknown, defaulting to 1000
[  447.568835][T26063] geneve3: entered promiscuous mode
[  449.164888][T26074] Set syz1 is full, maxelem 65536 reached
[  449.249815][T26116] netlink: 'syz.2.7226': attribute type 39 has an invalid length.
[  449.274598][   T28] audit: type=1326 audit(1785339104.776:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26118 comm="syz.6.7228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f154532df99 code=0x0
[  450.459329][T26163] netlink: 'syz.7.7245': attribute type 1 has an invalid length.
[  450.515759][T26163] 8021q: adding VLAN 0 to HW filter on device bond4
[  450.569589][T26167] vlan0: entered allmulticast mode
[  450.575029][T26167] bond4: entered allmulticast mode
[  450.710971][T26163] bond4: (slave geneve2): making interface the new active one
[  450.730682][T26163] geneve2: entered allmulticast mode
[  450.746735][T26163] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  450.761830][T26171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7247'.
[  450.891804][T26175] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7249'.
[  451.094796][T26184] lo speed is unknown, defaulting to 1000
[  451.274218][T26188] lo speed is unknown, defaulting to 1000
[  451.379434][T26195] netlink: 'syz.6.7258': attribute type 4 has an invalid length.
[  451.428191][T26195] netlink: 'syz.6.7258': attribute type 4 has an invalid length.
[  451.631998][T26204] erspan0: left promiscuous mode
[  451.673435][T26204] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.747157][T26204] veth0_to_team: left promiscuous mode
[  451.776112][T26204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  451.815103][T26204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.848443][T26204] veth1_macvtap: left promiscuous mode
[  451.854925][T26204] veth0_macvtap: left promiscuous mode
[  451.873870][T26204] veth0_macvtap: entered promiscuous mode
[  451.893195][T26204] veth1_macvtap: entered promiscuous mode
[  451.906149][T26204] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  451.920961][T26204] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  451.929380][T26204] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  451.942533][T26204] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  451.951683][T26204] veth0_to_team: entered promiscuous mode
[  451.980388][T26204] 8021q: adding VLAN 0 to HW filter on device bond1
[  451.996433][T26204] 8021q: adding VLAN 0 to HW filter on device bond2
[  452.057706][T26204] erspan0: entered promiscuous mode
[  452.071339][T26204] 8021q: adding VLAN 0 to HW filter on device bond3
[  452.083594][T26204] 8021q: adding VLAN 0 to HW filter on device team0
[  452.122804][T26204] 8021q: adding VLAN 0 to HW filter on device bond4
[  452.137034][T26204] 8021q: adding VLAN 0 to HW filter on device bond5
[  452.150637][T26204] 8021q: adding VLAN 0 to HW filter on device bond6
[  452.210307][T26204] 8021q: adding VLAN 0 to HW filter on device bond7
[  452.224406][T26204] 8021q: adding VLAN 0 to HW filter on device bond8
[  452.245935][T26204] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  452.257408][T26204] macvlan0: left promiscuous mode
[  452.332181][   T68] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  452.341356][   T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.353871][   T68] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  452.363127][   T68] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  452.372097][   T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.382596][   T68] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  452.408786][T26212] tipc: Cannot configure node identity twice
[  452.422719][   T68] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  452.438690][   T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.455674][   T68] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  452.469408][   T68] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  452.478569][   T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.487526][   T68] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  452.539702][ T4160] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  452.557938][ T4160] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  452.565890][ T9144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  452.969862][ T9144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  453.034234][   T28] audit: type=1400 audit(1785339108.295:3876): avc:  denied  { map } for  pid=26257 comm="syz.2.7284" path="socket:[73782]" dev="sockfs" ino=73782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  453.088767][   T28] audit: type=1326 audit(1785339108.323:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.1.7283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x0
[  453.181962][ T9144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  454.035358][T26297] loop7: detected capacity change from 0 to 256
[  454.044150][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7300'.
[  454.074421][T26297] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  454.081981][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7300'.
[  454.143226][T26297] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7299'.
[  454.167248][T26297] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7299'.
[  454.337883][T26308] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7313'.
[  456.261773][T26379] loop7: detected capacity change from 0 to 512
[  456.324044][T26379] EXT4-fs: inline encryption not supported
[  456.342709][T26379] EXT4-fs: Ignoring removed nomblk_io_submit option
[  456.378470][T26379] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  456.464567][T26379] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -ENXIO
[  456.611301][T26393] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7333'.
[  456.667393][T26395] loop7: detected capacity change from 0 to 128
[  456.679935][T26395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  456.716892][T26395] System zones: 1-3, 19-19, 35-36
[  456.729872][T26395] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  456.744125][T26395] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  456.837142][T23062] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  456.868400][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  456.920536][T26409] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7338'.
[  457.138749][T26417] lo speed is unknown, defaulting to 1000
[  457.588066][   T28] audit: type=1400 audit(1785339112.553:3878): avc:  denied  { setopt } for  pid=26426 comm="syz.7.7346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  457.686507][T26425] infiniband syz0: set active
[  457.704861][T26425] infiniband syz0: added ipvlan0
[  457.749581][T26425] RDS/IB: syz0: added
[  457.770177][T26425] smc: adding ib device syz0 with port count 1
[  457.795504][T26425] smc:    ib device syz0 port 1 has no pnetid
[  460.761610][T26427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  460.816241][T26459] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7354'.
[  460.859774][T26464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7356'.
[  460.895769][T26462] loop7: detected capacity change from 0 to 2048
[  460.969141][T26462]  loop7: p1 < > p3
[  461.007867][T26462] loop7: p3 size 134217728 extends beyond EOD, truncated
[  461.120396][T26494] netlink: 'syz.2.7369': attribute type 1 has an invalid length.
[  461.141259][T26494] bond11: entered promiscuous mode
[  461.154296][T26494] 8021q: adding VLAN 0 to HW filter on device bond11
[  461.190519][T26502] netdevsim netdevsim2 netdevsim0: Device is already in use.
[  461.253177][T26494] netdevsim netdevsim2 netdevsim0: Device is already in use.
[  461.261854][T26508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7374'.
[  461.433723][T26528] loop7: detected capacity change from 0 to 1764
[  461.515143][T26536] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  461.752681][T26552] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7392'.
[  461.778576][T26552] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7392'.
[  461.823592][T26556] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.7394'.
[  462.756746][T26594] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7408'.
[  462.835996][T26600] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.845682][T26600] 8021q: adding VLAN 0 to HW filter on device team0
[  462.855851][T26600] tipc: Resetting bearer <eth:team0>
[  462.868750][T26600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.953314][T26600] veth1_vlan: left promiscuous mode
[  462.962870][T26600] veth0_vlan: left promiscuous mode
[  462.970751][T26600] veth0_vlan: entered promiscuous mode
[  462.985464][T26600] veth1_vlan: entered promiscuous mode
[  463.004675][T26600] veth1_macvtap: left promiscuous mode
[  463.019271][T26600] veth0_macvtap: left promiscuous mode
[  463.034437][T26600] veth0_macvtap: entered promiscuous mode
[  463.048786][T26600] veth1_macvtap: entered promiscuous mode
[  463.069266][T26600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  463.129414][T26600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  463.141110][T26600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  463.151901][T26600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  463.220303][T26600] 8021q: adding VLAN 0 to HW filter on device bond1
[  463.221530][   T28] audit: type=1326 audit(1785339117.831:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26612 comm="syz.1.7414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f1bd1187d17 code=0x0
[  463.266450][T26600] 8021q: adding VLAN 0 to HW filter on device bond2
[  463.309374][   T28] audit: type=1400 audit(1785339117.906:3880): avc:  denied  { read } for  pid=26615 comm="syz.7.7416" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  463.353568][T26618] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7415'.
[  463.373236][T26618] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7415'.
[  463.391415][T26621] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7417'.
[  463.411057][T26600] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  463.442567][T26600] 8021q: adding VLAN 0 to HW filter on device bond3
[  463.508690][T26600] batman_adv: batadv0: Interface activated: gretap2
[  463.518346][T26600] bond4: left promiscuous mode
[  463.523361][T26600] bridge2: left promiscuous mode
[  463.558010][T26632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7417'.
[  463.627948][  T290] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  463.643605][  T290] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  463.679196][  T290] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  463.694687][  T290] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  463.731223][ T6070] bond3: (slave veth13): link status definitely up, 10000 Mbps full duplex
[  463.760013][ T6070] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  463.795767][ T6070] bond3: active interface up!
[  464.290477][   T28] audit: type=1326 audit(1785339118.832:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.1.7428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  464.372264][   T28] audit: type=1326 audit(1785339118.860:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.1.7428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  464.402030][   T28] audit: type=1326 audit(1785339118.926:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.1.7428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  464.439104][   T28] audit: type=1326 audit(1785339118.926:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.1.7428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  465.113489][   T28] audit: type=1400 audit(1785339119.599:3885): avc:  denied  { mount } for  pid=26659 comm="syz.1.7432" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  465.149277][T26663] loop7: detected capacity change from 0 to 1024
[  465.289123][T26663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.369364][   T28] audit: type=1400 audit(1785339119.824:3886): avc:  denied  { write } for  pid=26662 comm="syz.7.7433" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  465.461395][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.541512][T26682] file system registered
[  465.547843][   T28] audit: type=1400 audit(1785339120.002:3887): avc:  denied  { write } for  pid=26681 comm="syz.7.7438" name="functions" dev="configfs" ino=5674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  465.582064][T26670] gretap1: left promiscuous mode
[  465.596652][T26670] geneve3: left promiscuous mode
[  465.602423][T26682] read descriptors
[  465.616010][   T28] audit: type=1400 audit(1785339120.011:3888): avc:  denied  { mount } for  pid=26681 comm="syz.7.7438" name="/" dev="functionfs" ino=74346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1
[  465.651937][T23062] ffs_data_put(): freeing
[  466.104132][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  466.706815][T26718] netlink: 'syz.7.7454': attribute type 1 has an invalid length.
[  466.770223][T26718] 8021q: adding VLAN 0 to HW filter on device bond6
[  466.886104][T26718] bond5: (slave bond6): making interface the new active one
[  466.894005][T26718] bond5: (slave bond6): Enslaving as an active interface with an up link
[  466.928460][T26723] bond5: (slave gretap1): Enslaving as a backup interface with an up link
[  466.964101][T26718] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7454'.
[  466.978716][T26718] 8021q: adding VLAN 0 to HW filter on device bond5
[  467.104934][T26735] lo: Caught tx_queue_len zero misconfig
[  467.122910][T26735] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  467.217235][T26742] netlink: 'syz.2.7457': attribute type 4 has an invalid length.
[  467.244510][T26729] netlink: 'syz.2.7457': attribute type 4 has an invalid length.
[  467.474807][T26729] erspan0: left allmulticast mode
[  467.534956][ T9111] syz0: Port: 1 Link DOWN
[  467.536424][T26750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7466'.
[  467.549953][ T6058] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  467.568236][ T6058] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.583036][ T6058] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  467.592777][ T6058] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.602708][T26754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7466'.
[  467.613021][ T6058] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  467.631279][ T6058] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.648526][ T6058] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  467.667591][ T6058] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.764591][T26762] lo speed is unknown, defaulting to 1000
[  470.491337][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  470.491355][   T28] audit: type=1326 audit(1785339124.625:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26806 comm="syz.6.7489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f154532df99 code=0x0
[  470.635218][T26821] bond3: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  470.655303][T26821] bond3: entered allmulticast mode
[  470.677474][   T28] audit: type=1400 audit(1785339124.812:3892): avc:  denied  { getopt } for  pid=26824 comm="syz.7.7497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  470.684155][T26821] ip6gretap1: entered promiscuous mode
[  470.746139][T26821] ip6gretap1: entered allmulticast mode
[  470.757747][T26821] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  470.809121][T26836] netlink: 'syz.3.7500': attribute type 1 has an invalid length.
[  470.877359][T26836] 8021q: adding VLAN 0 to HW filter on device bond5
[  470.886550][T26836] bond4: (slave bond5): making interface the new active one
[  470.894718][T26836] bond4: (slave bond5): Enslaving as an active interface with an up link
[  470.986209][T26836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7500'.
[  471.082689][T26841] bridge3: left promiscuous mode
[  471.092159][T26841] bond2: left promiscuous mode
[  471.097115][T26841] bridge4: left promiscuous mode
[  471.116802][T26841] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  471.140846][T26836] 8021q: adding VLAN 0 to HW filter on device bond4
[  471.174794][   T28] audit: type=1326 audit(1785339125.270:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26851 comm="syz.2.7506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x7fc00000
[  471.212534][   T28] audit: type=1326 audit(1785339125.270:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26851 comm="syz.2.7506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7facae26df99 code=0x7fc00000
[  471.241626][   T28] audit: type=1326 audit(1785339125.336:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26851 comm="syz.2.7506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facae267d17 code=0x7fc00000
[  471.272066][   T28] audit: type=1326 audit(1785339125.354:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26851 comm="syz.2.7506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facae20f319 code=0x7fc00000
[  471.303312][   T28] audit: type=1326 audit(1785339125.354:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26851 comm="syz.2.7506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7facae20f3dd code=0x7fc00000
[  471.351769][   T28] audit: type=1326 audit(1785339125.354:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26851 comm="syz.2.7506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7facae26df99 code=0x7fc00000
[  471.763935][T26879] netlink: 'syz.6.7519': attribute type 1 has an invalid length.
[  471.938495][T26886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7519'.
[  471.971916][T26876] lo speed is unknown, defaulting to 1000
[  471.978688][T26886] 8021q: adding VLAN 0 to HW filter on device bond5
[  472.027405][T26879] 8021q: adding VLAN 0 to HW filter on device bond6
[  472.059598][T26879] bond5: (slave bond6): making interface the new active one
[  472.075759][T26879] bond5: (slave bond6): Enslaving as an active interface with an up link
[  472.131269][T26885] bond5: (slave gretap3): Enslaving as a backup interface with an up link
[  472.191474][T26882] lo speed is unknown, defaulting to 1000
[  472.492645][T26891] loop7: detected capacity change from 0 to 512
[  472.710641][T26906] 8021q: adding VLAN 0 to HW filter on device bond12
[  472.718849][T26906] team0: Failed to send port change of device bond12 via netlink (err -105)
[  472.722184][T26891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.728040][T26906] team0: Failed to send options change via netlink (err -105)
[  472.749999][T26906] team0: Port device bond12 added
[  472.751082][T26891] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  472.850550][T26921] macvtap1: left allmulticast mode
[  472.854303][   T28] audit: type=1400 audit(1785339126.833:3899): avc:  denied  { write } for  pid=26890 comm="syz.7.7522" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  472.868806][T26921] xfrm1: left allmulticast mode
[  472.893883][T26921] ipvlan2: left allmulticast mode
[  472.921915][T26921] bond8: left allmulticast mode
[  472.932339][   T28] audit: type=1400 audit(1785339126.917:3900): avc:  denied  { create } for  pid=26925 comm="syz.1.7534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  472.944258][T26921] bond11: left promiscuous mode
[  472.988633][T26926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7534'.
[  473.158379][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.545146][T26952] netlink: 'syz.6.7542': attribute type 2 has an invalid length.
[  476.518078][T26973] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7550'.
[  476.644651][T26989] netlink: 'syz.7.7556': attribute type 10 has an invalid length.
[  476.729484][T26989] 8021q: adding VLAN 0 to HW filter on device team0
[  476.769313][T26989] bond0: (slave team0): Enslaving as an active interface with an up link
[  477.377520][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  477.377537][   T28] audit: type=1400 audit(1785339131.082:3903): avc:  denied  { map } for  pid=27040 comm="syz.3.7571" path="socket:[75893]" dev="sockfs" ino=75893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  477.418706][   T28] audit: type=1400 audit(1785339131.082:3904): avc:  denied  { read } for  pid=27040 comm="syz.3.7571" path="socket:[75893]" dev="sockfs" ino=75893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  477.547758][T27060] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[  477.568254][   T28] audit: type=1400 audit(1785339131.250:3905): avc:  denied  { relabelto } for  pid=27058 comm="syz.3.7580" name="585" dev="tmpfs" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  477.599925][   T28] audit: type=1400 audit(1785339131.259:3906): avc:  denied  { associate } for  pid=27058 comm="syz.3.7580" name="585" dev="tmpfs" ino=3028 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768"
[  477.734891][   T28] audit: type=1400 audit(1785339131.409:3907): avc:  denied  { write } for  pid=17701 comm="syz-executor" name="585" dev="tmpfs" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  477.774018][   T28] audit: type=1400 audit(1785339131.409:3908): avc:  denied  { remove_name } for  pid=17701 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  477.803089][   T28] audit: type=1400 audit(1785339131.409:3909): avc:  denied  { write } for  pid=17701 comm="syz-executor" name="585" dev="tmpfs" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  477.831208][   T28] audit: type=1400 audit(1785339131.409:3910): avc:  denied  { write } for  pid=17701 comm="syz-executor" name="585" dev="tmpfs" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  477.867195][   T28] audit: type=1400 audit(1785339131.437:3911): avc:  denied  { write } for  pid=17701 comm="syz-executor" name="585" dev="tmpfs" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  477.904435][   T28] audit: type=1400 audit(1785339131.437:3912): avc:  denied  { rmdir } for  pid=17701 comm="syz-executor" name="585" dev="tmpfs" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  479.539854][T27144] loop7: detected capacity change from 0 to 1024
[  479.542753][T27143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7616'.
[  479.562527][T27144] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  479.595352][T27144] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.7615: lblock 2 mapped to illegal pblock 2 (length 1)
[  479.615918][T27144] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  479.616120][T27144] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.7615: lblock 0 mapped to illegal pblock 48 (length 1)
[  479.625274][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  479.625300][    C0] EXT4-fs (loop7): initial error at time 1785339133: ext4_map_blocks:791: inode 3: block 2
[  479.625353][    C0] EXT4-fs (loop7): last error at time 1785339133: ext4_map_blocks:791: inode 3: block 2
[  479.666912][T27144] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  479.667122][T27144] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.7615: Failed to acquire dquot type 0
[  479.687632][T27144] loop7: lost filesystem error report for type 5 error -117
[  479.688330][T27144] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  479.705347][T27144] loop7: lost filesystem error report for type 5 error -117
[  479.705483][T27144] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.7615: mark_inode_dirty error
[  479.708381][T27131] tipc: Resetting bearer <eth:team0>
[  479.713124][T27144] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  479.729546][T27144] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  479.749346][T27144] EXT4-fs (loop7): 1 orphan inode deleted
[  479.755566][T27144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.769419][ T4160] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  479.797635][ T4160] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 0
[  479.841679][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.867898][ T4160] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  479.894323][ T4160] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  479.895720][ T4160] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 0
[  479.919796][ T4160] loop7: lost filesystem error report for type 5 error -117
[  479.920219][T23062] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[  479.941606][T23062] loop7: lost filesystem error report for type 5 error -117
[  479.941733][T23062] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  479.973118][T23062] loop7: lost filesystem error report for type 5 error -117
[  479.973275][T23062] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  479.992072][T23062] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  480.180292][T27131] tipc: Resetting bearer <eth:syzkaller0>
[  480.263626][T27131] batman_adv: batadv0: Interface deactivated: gretap2
[  480.363710][T27163] cgroup: Unexpected value for 'nofavordynmods'
[  480.444772][   T12] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.453966][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  480.468984][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  480.487891][   T12] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.512682][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  480.535340][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  480.555632][   T12] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.564956][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  480.574663][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  480.584021][   T12] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.593799][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  480.603838][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  480.647916][T27167] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7624'.
[  480.769925][T27172] loop7: detected capacity change from 0 to 164
[  480.776794][T27172] iso9660: Unknown parameter 'D'@æ'
[  481.206151][T27189] netlink: 'syz.1.7635': attribute type 1 has an invalid length.
[  481.236414][T27189] 8021q: adding VLAN 0 to HW filter on device bond10
[  481.327199][T27194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7635'.
[  481.347751][T27194] netlink: 'syz.1.7635': attribute type 1 has an invalid length.
[  481.491954][T27196] netlink: 'syz.3.7637': attribute type 1 has an invalid length.
[  481.596108][T27189] bond10: entered promiscuous mode
[  481.606604][T27189] bond10: entered allmulticast mode
[  481.630380][T27194] bond10: left promiscuous mode
[  481.636863][T27194] bond10: left allmulticast mode
[  481.646609][T27194] 8021q: adding VLAN 0 to HW filter on device bond10
[  481.679611][T27196] 8021q: adding VLAN 0 to HW filter on device bond6
[  481.762353][T27197] bond6: (slave veth5): Enslaving as an active interface with a down link
[  481.838830][T27198] 8021q: adding VLAN 0 to HW filter on device bond3
[  481.855926][T27199] veth0_virt_wifi: entered promiscuous mode
[  481.899112][T27199] bond6: (slave veth0_virt_wifi): making interface the new active one
[  481.924341][T27199] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  481.942159][   T68] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  481.970005][   T68] bond3: (slave ip6gretap1): link status definitely up, 0 Mbps full duplex
[  481.981691][   T68] bond3: active interface up!
[  482.234442][T27241] loop7: detected capacity change from 0 to 512
[  482.259832][T27241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  482.282276][T27241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.305483][T27241] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  482.449247][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.507499][T27266] sctp: [Deprecated]: syz.7.7648 (pid 27266) Use of struct sctp_assoc_value in delayed_ack socket option.
[  482.507499][T27266] Use struct sctp_sack_info instead
[  483.670915][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  483.670932][   T28] audit: type=1400 audit(1785339136.968:3934): avc:  denied  { write } for  pid=23062 comm="syz-executor" name="305" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  483.702604][T27356] tmpfs: Bad value for 'size'
[  483.723313][   T28] audit: type=1400 audit(1785339136.968:3935): avc:  denied  { write } for  pid=23062 comm="syz-executor" name="305" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  483.725620][T27356] loop7: detected capacity change from 0 to 512
[  483.781883][   T28] audit: type=1400 audit(1785339136.968:3936): avc:  denied  { write } for  pid=23062 comm="syz-executor" name="305" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  483.785744][T27356] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  483.856035][   T28] audit: type=1400 audit(1785339136.968:3937): avc:  denied  { write } for  pid=23062 comm="syz-executor" name="305" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  483.869180][T27356] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7665: bg 0: block 255: padding at end of block bitmap is not set
[  483.897193][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  483.908838][T27356] loop7: lost filesystem error report for type 5 error -117
[  483.910326][T27356] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  483.917768][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  483.917806][    C1] EXT4-fs (loop7): initial error at time 1785339137: ext4_validate_block_bitmap:441
[  483.917873][    C1] EXT4-fs (loop7): last error at time 1785339137: ext4_validate_block_bitmap:441
[  483.952290][T27356] loop7: lost filesystem error report for type 5 error -117
[  483.953873][T27356] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7665: invalid indirect mapped block 1 (level 1)
[  483.975632][T27356] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  483.977085][T27356] EXT4-fs (loop7): 1 truncate cleaned up
[  483.994308][T27356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.035188][   T28] audit: type=1400 audit(1785339137.305:3938): avc:  denied  { read append } for  pid=27355 comm="syz.7.7665" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  484.079842][   T28] audit: type=1400 audit(1785339137.305:3939): avc:  denied  { open } for  pid=27355 comm="syz.7.7665" path="/306/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  484.127661][T23062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.188923][T27368] loop7: detected capacity change from 0 to 128
[  484.217489][T27371] netlink: 830 bytes leftover after parsing attributes in process `syz.6.7671'.
[  484.218949][T27368] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  484.350814][   T28] audit: type=1326 audit(1785339137.595:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27380 comm="syz.3.7675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  484.367951][T27379] syzkaller0: entered promiscuous mode
[  484.384277][T27379] syzkaller0: entered allmulticast mode
[  484.391409][   T28] audit: type=1326 audit(1785339137.595:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27380 comm="syz.3.7675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  484.417701][   T28] audit: type=1326 audit(1785339137.604:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27380 comm="syz.3.7675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  484.445194][   T28] audit: type=1326 audit(1785339137.604:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27380 comm="syz.3.7675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  484.475577][T27386] bond7: option ad_actor_sys_prio: invalid value (0)
[  484.483253][T27386] bond7: option ad_actor_sys_prio: allowed values 1 - 65535
[  484.493867][T27386] bond7 (unregistering): Released all slaves
[  484.565987][T27398] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component
[  485.001993][T27425] nftables ruleset with unbound chain
[  485.165805][T27419] Set syz1 is full, maxelem 65536 reached
[  485.208664][T27430] syzkaller0: entered promiscuous mode
[  485.214364][T27430] syzkaller0: entered allmulticast mode
[  485.852008][T27486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7719'.
[  486.365695][T27513] Character devices:
[  486.365695][T27513]   1 mem
[  486.365695][T27513]   4 /dev/vc/0
[  486.365695][T27513]   4 tty
[  486.365695][T27513]   4 ttyS
[  486.365695][T27513]   5 /dev/tty
[  486.365695][T27513]   5 /dev/console
[  486.365695][T27513]   5 /dev/ptmx
[  486.365695][T27513]   7 vcs
[  486.365695][T27513]  10 misc
[  486.365695][T27513]  13 input
[  486.365695][T27513]  21 sg
[  486.365695][T27513]  29 fb
[  486.365695][T27513]  81 video4linux
[  486.365695][T27513]  98 comedi
[  486.365695][T27513] 108 ppp
[  486.365695][T27513] 116 alsa
[  486.365695][T27513] 128 ptm
[  486.365695][T27513] 136 pts
[  486.365695][T27513] 166 ttyACM
[  486.365695][T27513] 180 usb
[  486.365695][T27513] 188 ttyUSB
[  486.365695][T27513] 189 usb_device
[  486.365695][T27513] 202 cpu/msr
[  486.365695][T27513] 203 cpu/cpuid
[  486.365695][T27513] 212 DVB
[  486.365695][T27513] 226 drm
[  486.365695][T27513] 231 infiniband_mad
[  486.365695][T27513] 231 infiniband_verbs
[  486.365695][T27513] 234 gnss
[  486.365695][T27513] 235 roccat
[  486.365695][T27513] 236 hidraw
[  486.365695][T27513] 237 infiniband_verbs
[  486.365695][T27513] 238 infiniband_mad
[  486.365695][T27513] 239 ttyGS
[  486.365695][T27513] 240 ttyDBC
[  486.365695][T27513] 241 usbmon
[  486.365695][T27513] 242 ttyHS
[  486.365695][T27513] 243 macvtap
[  486.365695][T27513] 244 ipvtap
[  486.365695][T27513] 245 mei
[  486.365695][T27513] 246 bsg
[  486.365695][T27513] 247 tee
[  486.365695][T27513] 248 iio
[  486.365695][T27513] 249 ptp
[  486.365695][T27513] 250 pps
[  486.365695][T27513] 251 cec
[  486.365695][T27513] 252 media
[  486.365695][T27513] 253 rtc
[  486.365695][T27513] 254 gpiochip
[  486.365695][T27513] 
[  486.365695][T27513] Block devices:
[  486.365695][T27513]   7 loop
[  486.365695][T27513]   8 sd
[  486.365695][T27513]   9 md
[  486.365695][T27513]  11 sr
[  486.365695][T27513]  65 sd
[  486.365695][T27513]  66 sd
[  486.365695][T27513]  67 sd
[  486.365695][T27513]  68 sd
[  486.365695][T27513]  69 sd
[  486.627995][T27520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7736'.
[  486.728304][T27522] lo speed is unknown, defaulting to 1000
[  486.921001][T27529] IPVS: set_ctl: invalid protocol: 44 172.20.20.20:20004
[  487.214820][T27542] lo speed is unknown, defaulting to 1000
[  487.422894][T27550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.440597][T27550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.493957][T27550] batadv0 (unregistering): left promiscuous mode
[  488.192882][ T9147] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  488.559557][T27580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7759'.
[  489.184073][ T9148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  489.211080][T27604] lo speed is unknown, defaulting to 1000
[  489.370097][T27611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.379924][T27611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.393071][T27611] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.401023][T27611] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.412288][T27611] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.419924][T27611] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.558943][T27616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7770'.
[  490.495753][T27657] netlink: 'syz.2.7785': attribute type 1 has an invalid length.
[  490.511221][T27657] bond13: entered promiscuous mode
[  490.516790][T27657] 8021q: adding VLAN 0 to HW filter on device bond13
[  490.539022][T27657] bond13: (slave bridge3): making interface the new active one
[  490.546865][T27657] bridge3: entered promiscuous mode
[  490.557260][T27657] bond13: (slave bridge3): Enslaving as an active interface with an up link
[  491.231508][T27668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7788'.
[  491.246398][T27668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.255379][T27668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.287552][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  491.287568][   T28] audit: type=1400 audit(1785339144.089:3958): avc:  denied  { mounton } for  pid=27670 comm="syz.6.7789" path="/1565/file1" dev="tmpfs" ino=8097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  491.822353][T27677] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7791'.
[  491.903322][T27681] lo speed is unknown, defaulting to 1000
[  492.079788][T27684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7794'.
[  492.089051][T27681] loop7: detected capacity change from 0 to 764
[  492.099210][T27681] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  492.211562][T27696] netlink: 'syz.2.7800': attribute type 1 has an invalid length.
[  492.227186][T27696] 8021q: adding VLAN 0 to HW filter on device bond14
[  492.336825][T27696] bond14: (slave dummy0): making interface the new active one
[  492.345559][T27696] bond14: (slave dummy0): Enslaving as an active interface with an up link
[  492.374571][T27696] 
: renamed from dummy0 (while UP)
[  492.465137][T27713] netlink: 'syz.6.7807': attribute type 1 has an invalid length.
[  492.481959][T27713] 8021q: adding VLAN 0 to HW filter on device bond7
[  492.498290][T27711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7806'.
[  492.568385][T27718] batman_adv: batadv0: Removing interface: gretap2
[  493.081025][T27743] netlink: 'syz.3.7819': attribute type 1 has an invalid length.
[  493.156498][T27743] 8021q: adding VLAN 0 to HW filter on device bond7
[  493.226331][T27748] bond7: (slave gretap3): making interface the new active one
[  493.269686][T27748] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  493.312106][T27743] netlink: 'syz.3.7819': attribute type 10 has an invalid length.
[  493.329197][T27743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7819'.
[  493.878620][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7826'.
[  493.901233][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7826'.
[  494.122051][T27774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7832'.
[  494.795289][T27762] tipc: Resetting bearer <eth:syzkaller0>
[  494.809594][T27762] syzkaller0: left promiscuous mode
[  494.829370][T27762] syzkaller0: left allmulticast mode
[  494.912822][T27762] ipvlan0: left allmulticast mode
[  494.918198][T27762] bond9: left allmulticast mode
[  494.990592][ T6070] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  495.021293][ T6070] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.054899][ T6070] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  495.065370][ T6070] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  495.097277][ T6070] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.107467][ T6070] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  495.116821][ T6070] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  495.126771][ T6070] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.180895][ T6070] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  495.226978][ T6070] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  495.253520][ T6070] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.273541][ T6070] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  496.285876][T27839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7855'.
[  496.509744][   T30] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  496.523947][   T30] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.559818][T27853] xt_TCPMSS: Only works on TCP SYN packets
[  496.562068][ T6062] netdevsim netdevsim10 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  496.582968][ T6062] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.637255][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7861'.
[  496.891863][   T28] audit: type=1326 audit(1785339149.339:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  496.957765][   T28] audit: type=1326 audit(1785339149.339:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  497.013000][   T28] audit: type=1326 audit(1785339149.339:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  497.061387][   T28] audit: type=1326 audit(1785339149.339:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  497.112249][   T28] audit: type=1326 audit(1785339149.367:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  497.152871][   T28] audit: type=1326 audit(1785339149.367:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  497.179407][   T28] audit: type=1326 audit(1785339149.367:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  497.210736][   T28] audit: type=1326 audit(1785339149.367:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  497.244946][   T28] audit: type=1326 audit(1785339149.367:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  497.280119][   T28] audit: type=1326 audit(1785339149.367:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27866 comm="syz.1.7865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  498.012150][T27904] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1
[  498.025704][T27904] ref_ctr increment failed for inode: 0x70c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813d410700
[  498.060066][T27903] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1
[  498.076299][T27903] ref_ctr decrement failed for inode: 0x70c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813d410700
[  498.093951][T27903] uprobe: syz.7.7889:27903 failed to unregister, leaking uprobe
[  498.149284][T27912] netlink: 'syz.7.7883': attribute type 1 has an invalid length.
[  498.214042][T27912] 8021q: adding VLAN 0 to HW filter on device bond7
[  498.311237][T27916] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  498.354456][T27912] macvlan0: entered promiscuous mode
[  498.371403][T27912] macvlan0: entered allmulticast mode
[  498.384387][T27912] bond7: entered promiscuous mode
[  498.389897][T27912] veth0_to_bond: entered promiscuous mode
[  498.397755][T27912] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  498.409630][T27912] bond7: left promiscuous mode
[  498.414514][T27912] veth0_to_bond: left promiscuous mode
[  498.551579][T27933] netlink: 'syz.7.7892': attribute type 1 has an invalid length.
[  498.584070][T27933] 8021q: adding VLAN 0 to HW filter on device bond8
[  498.730007][T27933] bond8: (slave ip6gretap1): making interface the new active one
[  498.745334][T27933] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  498.905676][T27956] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7903'.
[  499.001033][T27956] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7903'.
[  499.916294][T28000] netlink: 'syz.2.7918': attribute type 1 has an invalid length.
[  499.935844][T28000] 8021q: adding VLAN 0 to HW filter on device bond15
[  500.002910][T28000] bond15: (slave ip6gretap1): making interface the new active one
[  500.023820][T28000] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link
[  500.814367][T28040] 9p: Could not find request transport: Б
[  500.867946][T28051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7936'.
[  501.378025][T28067] lo speed is unknown, defaulting to 1000
[  501.949147][T28093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7951'.
[  501.975936][T28093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7951'.
[  502.570827][T28124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7961'.
[  502.597202][T28124] team1: entered promiscuous mode
[  502.615019][T28124] team1: entered allmulticast mode
[  502.626791][T28124] 8021q: adding VLAN 0 to HW filter on device team1
[  503.183905][T28135] netlink: 'syz.2.7966': attribute type 13 has an invalid length.
[  503.321164][T28142] netlink: 'syz.7.7969': attribute type 1 has an invalid length.
[  503.348174][T28142] 8021q: adding VLAN 0 to HW filter on device bond9
[  503.404439][T28142] bond9: (slave gretap2): making interface the new active one
[  503.425269][T28142] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  503.497402][T28142] netlink: 'syz.7.7969': attribute type 10 has an invalid length.
[  503.530631][T28142] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7969'.
[  503.563460][T28142] 
: entered promiscuous mode
[  503.578110][T28142] bond1: (slave 
): Releasing active interface
[  504.495354][T28099] syz.6.7949 (28099) used greatest stack depth: 8200 bytes left
[  504.716066][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7979'.
[  504.729131][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7980'.
[  504.746191][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7979'.
[  504.950998][T28084] syz.6.7946 (28084) used greatest stack depth: 6808 bytes left
[  505.095661][T28190] lo speed is unknown, defaulting to 1000
[  506.056053][T28225] 9pnet_fd: p9_fd_create_unix (28225): problem connecting socket: ./file0: -111
[  506.105683][T28225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7999'.
[  506.274586][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8005'.
[  506.285855][T28239] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  506.438607][T28248] lo speed is unknown, defaulting to 1000
[  507.144414][   T28] kauditd_printk_skb: 32 callbacks suppressed
[  507.144433][   T28] audit: type=1326 audit(1785339158.922:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.176759][   T28] audit: type=1326 audit(1785339158.922:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.203004][   T28] audit: type=1326 audit(1785339158.922:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.229375][   T28] audit: type=1326 audit(1785339158.922:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bd114e7ce code=0x7ffc0000
[  507.242878][T28255] lo speed is unknown, defaulting to 1000
[  507.289746][   T28] audit: type=1326 audit(1785339158.931:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.341993][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8014'.
[  507.361376][   T28] audit: type=1326 audit(1785339158.931:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.427377][   T28] audit: type=1326 audit(1785339158.931:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.484197][   T28] audit: type=1326 audit(1785339158.931:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.541601][   T28] audit: type=1326 audit(1785339158.931:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.567459][   T28] audit: type=1326 audit(1785339158.931:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.1.8013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd118df99 code=0x7ffc0000
[  507.627824][T28289] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8020'.
[  507.660947][T28289] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8020'.
[  508.671890][T28334] --map-set only usable from mangle table
[  508.736555][T18813] IPVS: starting estimator thread 0...
[  508.856835][T28337] IPVS: using max 1920 ests per chain, 96000 per kthread
[  508.931306][T28331] bond14: (slave 
): Releasing active interface
[  508.957929][T28331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  508.974659][T28339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8038'.
[  508.986459][T28332] team0: Device xfrm0 is of different type
[  508.997759][T28335] tipc: Enabled bearer <eth:team0>, priority 0
[  509.065073][T28339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28339 comm=syz.3.8038
[  509.121707][T28353] IPVS: Unknown mcast interface: vcan0
[  509.143538][T28353] netlink: 'syz.2.8044': attribute type 2 has an invalid length.
[  509.180599][T28353] 0: entered promiscuous mode
[  509.706098][T28383] lo speed is unknown, defaulting to 1000
[  510.043424][ T9112] page_pool_release_retry() stalled pool shutdown: id 122, 1 inflight 302 sec
[  512.551545][T28391] IPVS: Unknown mcast interface: vcan0
[  512.559246][T28391] netlink: 'syz.1.8060': attribute type 2 has an invalid length.
[  512.586343][T28391] 0: entered promiscuous mode
[  512.711963][T28402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8066'.
[  512.839979][T28413] netlink: 'syz.1.8070': attribute type 21 has an invalid length.
[  512.850954][T28413] IPv6: NLM_F_CREATE should be specified when creating new route
[  512.875876][T28413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  512.883139][T28413] IPv6: NLM_F_CREATE should be set when creating new route
[  512.890461][T28413] IPv6: NLM_F_CREATE should be set when creating new route
[  512.897864][T28413] IPv6: NLM_F_CREATE should be set when creating new route
[  512.910653][T28416] bridge0: port 1(syz_tun) entered blocking state
[  512.926768][T28413] netlink: 'syz.1.8070': attribute type 21 has an invalid length.
[  512.935345][T28416] bridge0: port 1(syz_tun) entered disabled state
[  512.942613][T28413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  512.951121][T28416] syz_tun: entered allmulticast mode
[  512.958325][T28416] syz_tun: entered promiscuous mode
[  512.964679][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8069'.
[  512.974815][T28416] bridge0: port 1(syz_tun) entered blocking state
[  512.981368][T28416] bridge0: port 1(syz_tun) entered forwarding state
[  513.022769][T28427] vlan1: entered promiscuous mode
[  513.057292][T28416] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  513.210399][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  513.210414][   T28] audit: type=1400 audit(1785339164.611:4053): avc:  denied  { create } for  pid=28437 comm="syz.3.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  513.933061][T28468] bridge0: port 1(syz_tun) entered blocking state
[  513.950625][T28468] bridge0: port 1(syz_tun) entered disabled state
[  513.964056][T28468] syz_tun: entered allmulticast mode
[  513.977176][T28468] syz_tun: entered promiscuous mode
[  514.256769][T28493] 9p: Bad value for 'rfdno'
[  514.408866][T28504] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8107'.
[  514.588319][T28516] veth0_vlan: entered allmulticast mode
[  514.619304][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8101'.
[  515.348788][T28516] veth0_vlan (unregistering): left allmulticast mode
[  516.307337][T28559] IPVS: Unknown mcast interface: vcan0
[  516.323190][T28559] netlink: 'syz.6.8117': attribute type 2 has an invalid length.
[  516.333920][T28559] 0: entered promiscuous mode
[  516.559901][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8122'.
[  516.579491][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8122'.
[  516.651932][T28585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8124'.
[  516.676227][T28585] netlink: 'syz.2.8124': attribute type 10 has an invalid length.
[  516.677630][T28584] 9p: Could not find request transport: 0x0000000000000005
[  516.684503][T28585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8124'.
[  516.705633][T28585] geneve3: entered promiscuous mode
[  516.711063][T28585] geneve3: entered allmulticast mode
[  516.719749][ T3432] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.729651][ T3432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.756863][ T6070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.774344][ T6062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.863473][T28600] netlink: 'syz.3.8133': attribute type 1 has an invalid length.
[  516.925843][T28600] bond8: (slave bridge3): making interface the new active one
[  516.940873][T28600] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  517.287069][T28616] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8140'.
[  517.544193][T28626] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8144'.
[  517.567425][T28626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28626 comm=syz.7.8144
[  517.983607][T28651] netlink: 'syz.1.8152': attribute type 322 has an invalid length.
[  518.611759][T28657] infiniband syz1: set down
[  518.616687][T28657] infiniband syz1: added syz_tun
[  518.630241][T28657] RDS/IB: syz1: added
[  518.635495][T28657] smc: adding ib device syz1 with port count 1
[  518.642317][T28657] smc:    ib device syz1 port 1 has no pnetid
[  518.791483][T28674] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8159'.
[  519.485689][T28716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8170'.
[  519.576419][T28716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28716 comm=syz.2.8170
[  519.872792][T28732] x_tables: duplicate entry at hook 3
[  520.591592][   T28] audit: type=1400 audit(1785339171.508:4054): avc:  denied  { create } for  pid=28769 comm="syz.1.8189" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  520.639718][   T28] audit: type=1400 audit(1785339171.536:4055): avc:  denied  { write } for  pid=28769 comm="syz.1.8189" name="file0" dev="tmpfs" ino=8946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  520.669879][   T28] audit: type=1400 audit(1785339171.536:4056): avc:  denied  { open } for  pid=28769 comm="syz.1.8189" path="/1729/file0" dev="tmpfs" ino=8946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  520.693375][   T28] audit: type=1400 audit(1785339171.546:4057): avc:  denied  { ioctl } for  pid=28769 comm="syz.1.8189" path="/1729/file0" dev="tmpfs" ino=8946 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  520.734090][   T28] audit: type=1400 audit(1785339171.649:4058): avc:  denied  { unlink } for  pid=3301 comm="syz-executor" name="file0" dev="tmpfs" ino=8946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  520.765172][T28774] tipc: Failed to remove unknown binding: 66,0,0/769922766:4125012329/4125012330
[  520.775243][T28774] tipc: Failed to remove unknown binding: 66,0,0/769922766:4125012329/4125012330
[  521.337606][T28795] netlink: 'syz.1.8200': attribute type 20 has an invalid length.
[  521.347644][T28795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8200'.
[  521.357243][T28795] netlink: 'syz.1.8200': attribute type 20 has an invalid length.
[  521.373690][T28795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8200'.
[  521.470049][   T28] audit: type=1326 audit(1785339172.341:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28797 comm="syz.2.8201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  521.499843][   T28] audit: type=1326 audit(1785339172.341:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28797 comm="syz.2.8201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  521.526217][   T28] audit: type=1326 audit(1785339172.369:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28797 comm="syz.2.8201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  521.553982][   T28] audit: type=1326 audit(1785339172.369:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28797 comm="syz.2.8201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facae26df99 code=0x7ffc0000
[  522.523029][T28834] ip6t_REJECT: ECHOREPLY is not supported
[  522.989044][   T28] audit: type=1400 audit(1785339173.754:4063): avc:  denied  { bind } for  pid=28841 comm="syz.2.8215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  523.537721][T28852] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  523.686099][T28867] tipc: Failed to remove unknown binding: 66,0,0/769922766:884772635/884772637
[  523.710423][T28867] tipc: Failed to remove unknown binding: 66,0,0/769922766:884772635/884772636
[  523.737261][T28867] tipc: Failed to remove unknown binding: 66,0,0/769922766:884772635/884772637
[  523.752074][T28867] tipc: Failed to remove unknown binding: 66,0,0/769922766:884772635/884772636
[  523.785961][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8226'.
[  523.851442][T28844] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  524.546288][T28908] netlink: 'syz.2.8238': attribute type 1 has an invalid length.
[  524.571716][T28908] 8021q: adding VLAN 0 to HW filter on device bond16
[  524.620189][T28908] bond16: (slave veth23): Enslaving as an active interface with a down link
[  524.638171][T28908] netlink: 'syz.2.8238': attribute type 10 has an invalid length.
[  524.646524][T28908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8238'.
[  524.655943][T28908] 
: entered promiscuous mode
[  524.834575][T28920] xt_CT: You must specify a L4 protocol and not use inversions on it
[  524.970654][T28927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8245'.
[  525.187641][T28943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8249'.
[  525.229628][T28943] syz_tun (unregistering): left allmulticast mode
[  525.604644][T28952] netlink: 'syz.6.8253': attribute type 11 has an invalid length.
[  525.927244][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8265'.
[  526.111338][T28994] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.122238][T28994] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.132530][T28997] netlink: 'syz.7.8270': attribute type 16 has an invalid length.
[  526.143218][T28997] netlink: 'syz.7.8270': attribute type 17 has an invalid length.
[  526.272318][T28997] 
: left promiscuous mode
[  526.307017][T28997] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.314177][T28997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  526.327969][T28997] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.335128][T28997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  526.423866][T28997] bridge3: left allmulticast mode
[  526.449612][T28997] ipvlan0: left allmulticast mode
[  526.454710][T28997] bond3: left allmulticast mode
[  526.465871][T28997] vlan0: left allmulticast mode
[  526.472091][T28997] bond4: left allmulticast mode
[  526.477452][T28997] geneve2: left allmulticast mode
[  526.497334][T28997] 8021q: adding VLAN 0 to HW filter on device eth0
[  526.513705][T28997] 8021q: adding VLAN 0 to HW filter on device eth1
[  526.568049][ T3432] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  526.581250][ T3432] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  526.596090][  T278] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  526.680232][ T9125] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  526.915598][ T9125] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  527.140651][T29038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8283'.
[  528.279914][T29079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8298'.
[  528.283718][T29080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8299'.
[  528.292059][T29079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8298'.
[  528.322824][T29080] team1: entered promiscuous mode
[  528.336904][T29080] team1: entered allmulticast mode
[  528.350742][T29083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8299'.
[  528.361642][T29080] 8021q: adding VLAN 0 to HW filter on device team1
[  528.377788][T29083] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  528.403245][T29083] team2: entered promiscuous mode
[  528.411827][T29083] team2: entered allmulticast mode
[  528.417449][T29083] 8021q: adding VLAN 0 to HW filter on device team2
[  529.758572][T29110] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  530.280413][T29125] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  530.536606][T29136] tipc: Failed to remove unknown binding: 66,0,0/2099199:2016843906/2016843907
[  530.583383][T29136] tipc: Failed to remove unknown binding: 66,0,0/2099199:2016843906/2016843907
[  530.714836][T29142] xt_hashlimit: size too large, truncated to 1048576
[  531.170259][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  531.464750][T29156] netlink: 'syz.2.8329': attribute type 13 has an invalid length.
[  531.483411][T29156] netlink: 'syz.2.8329': attribute type 17 has an invalid length.
[  531.530034][T29156] erspan0: left promiscuous mode
[  531.604292][T29156] 8021q: adding VLAN 0 to HW filter on device bond0
[  531.630830][T29156] 8021q: adding VLAN 0 to HW filter on device team0
[  531.652651][T29156] 
: left promiscuous mode
[  531.704796][T29156] veth0_to_team: left promiscuous mode
[  531.744658][T29156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  531.793571][T29156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  531.824412][T29156] veth1_vlan: left promiscuous mode
[  531.847221][T29156] veth0_vlan: left promiscuous mode
[  531.871648][T29156] veth0_vlan: entered promiscuous mode
[  531.889024][T29156] veth1_vlan: entered promiscuous mode
[  531.919441][T29156] veth1_macvtap: left promiscuous mode
[  531.940810][T29156] veth0_macvtap: left promiscuous mode
[  531.954222][T29166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8342'.
[  531.963663][T29156] veth0_macvtap: entered promiscuous mode
[  531.994012][T29156] veth1_macvtap: entered promiscuous mode
[  532.004013][T29156] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  532.026030][T29156] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  532.058140][T29156] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  532.083205][T29156] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.140086][T29156] 8021q: adding VLAN 0 to HW filter on device bond1
[  532.148427][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  532.148441][   T28] audit: type=1400 audit(1785339182.335:4106): avc:  denied  { lock } for  pid=29176 comm="syz.1.8336" path="socket:[82109]" dev="sockfs" ino=82109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  532.181884][T29156] 8021q: adding VLAN 0 to HW filter on device bond2
[  532.196675][T29156] 8021q: adding VLAN 0 to HW filter on device bond3
[  532.211603][T29156] 8021q: adding VLAN 0 to HW filter on device bond4
[  532.285932][T29156] 8021q: adding VLAN 0 to HW filter on device bond5
[  532.302100][T29156] erspan0: entered promiscuous mode
[  532.338568][T29156] bridge0: port 1(syz_tun) entered blocking state
[  532.345122][T29156] bridge0: port 1(syz_tun) entered forwarding state
[  532.368497][T29156] 8021q: adding VLAN 0 to HW filter on device bond6
[  532.382702][T29156] 8021q: adding VLAN 0 to HW filter on device bond7
[  532.419481][T29156] 8021q: adding VLAN 0 to HW filter on device bond8
[  532.432092][T29156] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  532.443803][T29156] veth0_to_team: entered promiscuous mode
[  532.451758][T29156] 8021q: adding VLAN 0 to HW filter on device bond9
[  532.462978][T29156] 8021q: adding VLAN 0 to HW filter on device bond10
[  532.477125][T29156] 8021q: adding VLAN 0 to HW filter on device bond11
[  532.487240][T29156] 8021q: adding VLAN 0 to HW filter on device bond12
[  532.500905][T29156] bond13: left promiscuous mode
[  532.506271][T29156] bridge3: left promiscuous mode
[  532.533548][T29156] geneve3: left promiscuous mode
[  532.541117][T29156] geneve3: left allmulticast mode
[  532.668984][    T9] syz1: Port: 1 Link ACTIVE
[  532.673837][ T9110] syz0: Port: 1 Link ACTIVE
[  532.678659][ T3432] bond16: (slave veth23): link status definitely up, 10000 Mbps full duplex
[  532.687947][ T3432] bond16: (slave veth23): making interface the new active one
[  532.698127][ T3432] bond16: active interface up!
[  532.704460][ T6065] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  532.715433][ T6065] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  532.755988][ T6065] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  532.766047][ T6065] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  532.801101][T29196] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8343'.
[  532.837072][T29198] netlink: 'syz.3.8344': attribute type 4 has an invalid length.
[  532.876507][T29198] netlink: 'syz.3.8344': attribute type 4 has an invalid length.
[  532.898009][T29196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29196 comm=syz.7.8343
[  532.900899][ T9110] lo speed is unknown, defaulting to 1000
[  532.952399][ T9110] lo speed is unknown, defaulting to 1000
[  532.967520][  T278] lo speed is unknown, defaulting to 1000
[  533.572126][T29218] netlink: 'syz.6.8352': attribute type 1 has an invalid length.
[  533.663965][T29218] 8021q: adding VLAN 0 to HW filter on device bond9
[  533.675114][T29218] bond8: (slave bond9): making interface the new active one
[  533.683882][T29218] bond8: (slave bond9): Enslaving as an active interface with an up link
[  533.815551][T29231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8353'.
[  533.898265][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8357'.
[  533.946469][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8357'.
[  533.961583][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8357'.
[  534.163794][T29241] bridge0: port 1(syz_tun) entered disabled state
[  534.178273][T29241] tipc: Resetting bearer <eth:team0>
[  534.186857][T29245] netlink: 'syz.2.8369': attribute type 16 has an invalid length.
[  534.195705][T29241] tipc: Resetting bearer <eth:team0>
[  534.205378][T29245] netlink: 'syz.2.8369': attribute type 17 has an invalid length.
[  534.231809][   T28] audit: type=1326 audit(1785339184.282:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.3.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  534.284141][   T28] audit: type=1326 audit(1785339184.282:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.3.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  534.341684][T29249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8372'.
[  534.356019][   T28] audit: type=1326 audit(1785339184.319:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.3.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  534.387430][   T28] audit: type=1326 audit(1785339184.319:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29243 comm="syz.3.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853a9bdf99 code=0x7ffc0000
[  534.496681][T29253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29253 comm=syz.1.8372
[  534.811899][   T30] tipc: Resetting bearer <eth:team0>
[  534.876106][T29245] bridge0: port 1(syz_tun) entered blocking state
[  534.882701][T29245] bridge0: port 1(syz_tun) entered forwarding state
[  534.905871][T29245] tipc: Resetting bearer <eth:team0>
[  534.912903][T29245] tipc: Resetting bearer <eth:team0>
[  536.399358][T29308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8382'.
[  536.436126][T29308] team1: entered promiscuous mode
[  536.447586][T29308] team1: entered allmulticast mode
[  536.456192][T29308] 8021q: adding VLAN 0 to HW filter on device team1
[  536.471574][T29312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8382'.
[  536.494740][T29312] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  536.524088][T29312] team2: entered promiscuous mode
[  536.540319][T29312] team2: entered allmulticast mode
[  536.556896][T29312] 8021q: adding VLAN 0 to HW filter on device team2
[  537.389320][T29350] tipc: Failed to remove unknown binding: 66,0,0/3839028787:474191543/474191545
[  537.423194][T29350] tipc: Failed to remove unknown binding: 66,0,0/3839028787:474191543/474191544
[  537.461115][T29350] tipc: Failed to remove unknown binding: 66,0,0/3839028787:474191543/474191545
[  537.484706][T29350] tipc: Failed to remove unknown binding: 66,0,0/3839028787:474191543/474191544
[  537.512422][T29352] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8395'.
[  538.078605][T29358] lo speed is unknown, defaulting to 1000
[  538.776355][T29380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8404'.
[  538.812659][T29380] team2: entered promiscuous mode
[  538.817880][T29380] team2: entered allmulticast mode
[  538.823497][T29380] 8021q: adding VLAN 0 to HW filter on device team2
[  538.832416][T29381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8404'.
[  538.843300][T29379] lo speed is unknown, defaulting to 1000
[  538.851967][T29381] team3 (uninitialized): Failed to send options change via netlink (err -105)
[  538.880478][T29381] team3: entered promiscuous mode
[  538.889199][T29381] team3: entered allmulticast mode
[  538.900554][T29381] 8021q: adding VLAN 0 to HW filter on device team3
[  539.548571][T29401] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  539.913958][T29411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8415'.
[  540.452523][T29432] No source specified
[  540.891117][   T28] audit: type=1326 audit(1785339190.505:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  540.943198][   T28] audit: type=1326 audit(1785339190.505:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  540.973361][   T28] audit: type=1326 audit(1785339190.505:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  541.041193][   T28] audit: type=1326 audit(1785339190.505:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  541.092951][   T28] audit: type=1326 audit(1785339190.533:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  541.121647][   T28] audit: type=1326 audit(2000000000.000:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  541.147554][   T28] audit: type=1326 audit(2000000000.000:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  541.174007][   T28] audit: type=1326 audit(2000000000.000:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  541.200474][   T28] audit: type=1326 audit(2000000000.000:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29463 comm="syz.6.8436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f154532df99 code=0x7ffc0000
[  541.226731][   T28] audit: type=1326 audit(2000000000.177:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.2.8441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facae26df99 code=0x0
[  541.330854][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  542.404217][T29511] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  542.481437][T29515] lo speed is unknown, defaulting to 1000
[  543.128821][T29531] netlink: 'syz.7.8461': attribute type 10 has an invalid length.
[  543.774358][T29547] tipc: Resetting bearer <eth:syzkaller0>
[  543.858407][T29547] team1: left promiscuous mode
[  543.879788][T29547] team1: left allmulticast mode
[  543.908927][T29547] team2: left promiscuous mode
[  543.929745][T29547] team2: left allmulticast mode
[  543.956884][T29550] erspan0: left promiscuous mode
[  544.017125][T29550] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.064534][T29550] veth0_to_team: left promiscuous mode
[  544.092050][T29550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  544.119697][T29550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  544.147220][T29550] veth1_macvtap: left promiscuous mode
[  544.163273][T29550] veth0_macvtap: left promiscuous mode
[  544.171179][T29550] veth0_macvtap: entered promiscuous mode
[  544.183136][T29550] veth1_macvtap: entered promiscuous mode
[  544.200514][T29550] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  544.219363][T29550] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  544.239450][T29550] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  544.250453][T29550] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  544.270961][T29550] veth0_to_team: entered promiscuous mode
[  544.279509][T29550] 8021q: adding VLAN 0 to HW filter on device bond1
[  544.295507][T29550] 8021q: adding VLAN 0 to HW filter on device bond2
[  544.354007][T29550] erspan0: entered promiscuous mode
[  544.372030][T29550] 8021q: adding VLAN 0 to HW filter on device bond3
[  544.402764][T29550] 8021q: adding VLAN 0 to HW filter on device team0
[  544.438306][T29550] 8021q: adding VLAN 0 to HW filter on device bond4
[  544.453502][T29550] 8021q: adding VLAN 0 to HW filter on device bond5
[  544.465817][T29550] 8021q: adding VLAN 0 to HW filter on device bond6
[  544.493085][T29563] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8475'.
[  544.518622][T29550] 8021q: adding VLAN 0 to HW filter on device bond7
[  544.529134][T29550] 8021q: adding VLAN 0 to HW filter on device bond8
[  544.541747][T29550] 8021q: adding VLAN 0 to HW filter on device bond9
[  544.551238][T29550] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  544.564138][T29550] 8021q: adding VLAN 0 to HW filter on device bond10
[  544.694119][T29550] 8021q: adding VLAN 0 to HW filter on device team1
[  544.703497][T29550] 8021q: adding VLAN 0 to HW filter on device team2
[  544.795695][ T4167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  544.809248][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.818605][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  544.828675][ T4167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  544.838053][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.847051][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  544.886689][T29557] lo speed is unknown, defaulting to 1000
[  544.901684][ T4167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  544.918410][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.952359][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  544.968767][ T4167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  545.006255][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.016585][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  545.031663][   T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  545.041504][   T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  545.074964][ T3387] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  545.350454][ T3387] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  545.452593][ T3387] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  545.823039][T29597] netlink: 'syz.2.8486': attribute type 10 has an invalid length.
[  545.848707][T29597] tipc: Resetting bearer <eth:team0>
[  545.870186][T29597] tipc: Resetting bearer <eth:team0>
[  545.891783][T29597] 8021q: adding VLAN 0 to HW filter on device team0
[  545.916767][T29597] bond0: (slave team0): Enslaving as an active interface with an up link
[  545.998216][T29600] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8485'.
[  546.099084][T29603] team0: Device bond0 is already an upper device of the team interface
[  546.306856][T29625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8495'.
[  546.319986][T29594] ==================================================================
[  546.328148][T29594] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  546.336810][T29594] 
[  546.339161][T29594] write to 0xffff88812f9da820 of 8 bytes by task 29595 on cpu 0:
[  546.346905][T29594]  shmem_file_splice_read+0x401/0x590
[  546.352329][T29594]  splice_direct_to_actor+0x261/0x680
[  546.357750][T29594]  do_splice_direct+0x119/0x1a0
[  546.362636][T29594]  do_sendfile+0x37d/0x640
[  546.367105][T29594]  __x64_sys_sendfile64+0x105/0x150
[  546.372350][T29594]  x64_sys_call+0x2dc4/0x3020
[  546.377505][T29594]  do_syscall_64+0x136/0x3c0
[  546.382146][T29594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.388073][T29594] 
[  546.390419][T29594] write to 0xffff88812f9da820 of 8 bytes by task 29594 on cpu 1:
[  546.398161][T29594]  shmem_file_splice_read+0x401/0x590
[  546.403582][T29594]  splice_direct_to_actor+0x261/0x680
[  546.408982][T29594]  do_splice_direct+0x119/0x1a0
[  546.413853][T29594]  do_sendfile+0x37d/0x640
[  546.418297][T29594]  __x64_sys_sendfile64+0x105/0x150
[  546.423532][T29594]  x64_sys_call+0x2dc4/0x3020
[  546.428239][T29594]  do_syscall_64+0x136/0x3c0
[  546.432862][T29594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.438779][T29594] 
[  546.441123][T29594] value changed: 0x000000000000386b -> 0x000000000000386c
[  546.448259][T29594] 
[  546.450616][T29594] Reported by Kernel Concurrency Sanitizer on:
[  546.456776][T29594] CPU: 1 UID: 0 PID: 29594 Comm: syz.6.8484 Not tainted syzkaller #0 PREEMPT(lazy) 
[  546.466169][T29594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  546.476242][T29594] ==================================================================
[  549.366721][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!