last executing test programs:

2m29.687812385s ago: executing program 32 (id=187):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

2m24.888440957s ago: executing program 33 (id=333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'geneve1\x00', 0x400})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f00000001c0)})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})

2m22.640394998s ago: executing program 34 (id=376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)

2m7.989657375s ago: executing program 6 (id=804):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

2m7.815600303s ago: executing program 6 (id=814):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110100, 0x32}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000, 0x2}, 0x20)

2m7.752659303s ago: executing program 6 (id=817):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

2m7.685121133s ago: executing program 6 (id=819):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000), 0x21, 0x7ab, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000002c0)='2', 0x1, 0x8080c61)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b)
fallocate(r0, 0x3, 0x5000000, 0x8000c62)

2m7.446627442s ago: executing program 6 (id=825):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
open(0x0, 0x0, 0x100)
msgsnd(0x0, 0x0, 0x2000, 0x0)

2m7.225426912s ago: executing program 7 (id=832):
perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x280, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

2m6.351127248s ago: executing program 7 (id=847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

2m6.310370408s ago: executing program 7 (id=849):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
write$cgroup_pid(r1, 0x0, 0x7ffffffff000)

2m6.197821568s ago: executing program 7 (id=851):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m6.176175328s ago: executing program 7 (id=854):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x8)
fcntl$notify(r0, 0x402, 0x1b)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m6.036656757s ago: executing program 7 (id=859):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

2m6.022960617s ago: executing program 35 (id=859):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

2m3.138959176s ago: executing program 6 (id=950):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xd}, 0x80, 0x0}, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x8}, 0x0)

2m3.114703806s ago: executing program 36 (id=950):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xd}, 0x80, 0x0}, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x8}, 0x0)

1m40.740698163s ago: executing program 8 (id=1855):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1m40.701249033s ago: executing program 8 (id=1856):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0ae1", "0000fd9f", "b08068ebce17ab00"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

1m40.700877623s ago: executing program 8 (id=1857):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring)

1m40.682868553s ago: executing program 8 (id=1858):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0)
mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
open_tree(r0, &(0x7f0000000280)='\x00', 0x89901)

1m40.663127243s ago: executing program 8 (id=1861):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x16)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, 0x38}}, 0x0)

1m40.492060642s ago: executing program 8 (id=1867):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r2, 0x3)

1m40.491827402s ago: executing program 37 (id=1867):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r2, 0x3)

1m34.851069002s ago: executing program 3 (id=2040):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m34.748763291s ago: executing program 3 (id=2044):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

1m34.706838721s ago: executing program 3 (id=2046):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x9000000)

1m34.57981776s ago: executing program 3 (id=2054):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x145)

1m34.52806862s ago: executing program 3 (id=2058):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00')
preadv(r2, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0)

1m34.300670019s ago: executing program 3 (id=2071):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000840)

1m34.300572689s ago: executing program 38 (id=2071):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000840)

1m8.649968524s ago: executing program 4 (id=2868):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000)
close(r2)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)

1m8.540636174s ago: executing program 4 (id=2871):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x6)

1m8.517418754s ago: executing program 4 (id=2872):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0)

1m8.494276564s ago: executing program 4 (id=2874):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00')

1m8.480057424s ago: executing program 4 (id=2876):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000600), &(0x7f0000000700)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
close_range(r0, r0, 0x0)

1m8.296557843s ago: executing program 4 (id=2883):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m8.292407933s ago: executing program 39 (id=2883):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.518138052s ago: executing program 1 (id=5271):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000001c0)=0x1, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

1.503496122s ago: executing program 1 (id=5272):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002bbd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

1.353839532s ago: executing program 1 (id=5274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

992.071641ms ago: executing program 1 (id=5289):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4018, 0x3, 0x1f8, 0x0, 0x0, 0x148, 0x0, 0x150, 0x250, 0x240, 0x240, 0x250, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)

936.676602ms ago: executing program 9 (id=5291):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
modify_ldt$write(0x1, &(0x7f00000002c0)={0x8, 0x0, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)

936.362971ms ago: executing program 9 (id=5293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0)

935.551712ms ago: executing program 1 (id=5301):
unshare(0x42000000)
syz_usb_disconnect(0xffffffffffffffff)
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @remote}})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)

916.378052ms ago: executing program 2 (id=5294):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')

712.190061ms ago: executing program 0 (id=5295):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000e3250018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
unshare(0x2a020480)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
close_range(r1, 0xffffffffffffffff, 0x2)

712.085091ms ago: executing program 9 (id=5296):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x8000000000002}, 0x18)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)

702.606041ms ago: executing program 2 (id=5297):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20)

686.799561ms ago: executing program 9 (id=5298):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

650.389541ms ago: executing program 9 (id=5300):
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
mount$9p_fd(0x0, &(0x7f00000004c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010008000000000000001800000018000000050200000000000000000085000000000200000001000000dae1d33c6fa375a300"], 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "886d8172a0bb4a4355abd25c841f2a1365dae42ffaf91e2cdd504093ad0b55b459af7e4d8fc3861acdaf94a55ccd3f0ef6ba59bb94960277facd6a2729396ba39f83a69aa9985d0e408c88306cd0bbe97251454ab8e161127d1cde92bfdc702187e1d500588637a5e230614303bb5a19b147aba649769d72a2456d28db3bdec7801c23b9ca3af17261f5d0a2f07a899403c20c1fb74d240c2e12e109370735f34cf87bb804f5c38919b27fb4df37"}, 0xaf61a3)

598.417161ms ago: executing program 0 (id=5302):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

594.561191ms ago: executing program 2 (id=5303):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

496.061821ms ago: executing program 2 (id=5304):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r3=>0x0})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x100, 0x4)
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

495.893921ms ago: executing program 2 (id=5305):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)

424.691991ms ago: executing program 2 (id=5307):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
io_setup(0x5, &(0x7f0000000500)=<r0=>0x0)
rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
io_submit(r0, 0x0, 0x0)

417.010931ms ago: executing program 0 (id=5308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r3, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@val={0x8, 0x12b, 0xffffffff}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)

403.315621ms ago: executing program 5 (id=5309):
splice(0xffffffffffffffff, &(0x7f0000000300)=0x8, 0xffffffffffffffff, 0x0, 0x0, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

366.518101ms ago: executing program 5 (id=5310):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fd, &(0x7f0000000ac0)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5)

269.62113ms ago: executing program 0 (id=5311):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1)

263.57965ms ago: executing program 5 (id=5312):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r2)

249.1512ms ago: executing program 9 (id=5313):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)='%', 0x1}], 0x1, 0x9)
tee(r3, r2, 0x8, 0x0)
write$binfmt_script(r4, 0x0, 0xfffffe48)

229.03556ms ago: executing program 5 (id=5314):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)

72.4985ms ago: executing program 5 (id=5315):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x24, r2, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x24}}, 0x0)

57.2218ms ago: executing program 0 (id=5316):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0)

13.51ms ago: executing program 5 (id=5317):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)

10.34797ms ago: executing program 1 (id=5318):
signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8)
r0 = syz_io_uring_setup(0x4169, &(0x7f00000010c0)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=<r2=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)

0s ago: executing program 0 (id=5319):
r0 = socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x9}, 0x140a0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf0, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0)

kernel console output (not intermixed with test programs):

kfs" ino=31259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  116.746454][   T29] audit: type=1400 audit(1738492237.822:3647): avc:  denied  { read } for  pid=11569 comm="syz.1.2796" path="socket:[31259]" dev="sockfs" ino=31259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  116.826071][T11576] erspan0: entered promiscuous mode
[  116.831434][T11576] macvtap1: entered promiscuous mode
[  116.836872][T11576] macvtap1: entered allmulticast mode
[  116.842332][T11576] erspan0: entered allmulticast mode
[  116.859634][T11576] erspan0: left allmulticast mode
[  116.864847][T11576] erspan0: left promiscuous mode
[  116.913803][   T29] audit: type=1107 audit(1738492238.012:3648): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  116.982372][   T29] audit: type=1326 audit(1738492238.082:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  117.006055][   T29] audit: type=1326 audit(1738492238.082:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  117.031895][   T29] audit: type=1326 audit(1738492238.142:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  117.055404][   T29] audit: type=1326 audit(1738492238.142:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  117.059294][T11596] loop9: detected capacity change from 0 to 8192
[  117.078924][   T29] audit: type=1326 audit(1738492238.142:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  117.079358][   T29] audit: type=1326 audit(1738492238.192:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  117.090862][T11596] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  117.154375][   T29] audit: type=1326 audit(1738492238.262:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.0.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  117.423558][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  117.584041][T11613] 9pnet: p9_errstr2errno: server reported unknown error 
[  117.611757][T11617] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.678436][T11617] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.705051][T11635] netlink: 'syz.0.2826': attribute type 12 has an invalid length.
[  117.712932][T11635] netlink: 'syz.0.2826': attribute type 29 has an invalid length.
[  117.720766][T11635] netlink: 'syz.0.2826': attribute type 1 has an invalid length.
[  117.744777][T11617] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.768323][T11644] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11644 comm=syz.4.2830
[  117.774584][T11645] 9pnet: Could not find request transport: _u:
[  117.780891][T11644] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11644 comm=syz.4.2830
[  117.806264][T11648] __nla_validate_parse: 19 callbacks suppressed
[  117.806279][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'.
[  117.826129][T11617] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.883849][T11617] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.895035][T11617] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.906494][T11617] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.917660][T11617] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.997264][T11672] pim6reg1: entered allmulticast mode
[  118.120598][T11687] syzkaller0: entered promiscuous mode
[  118.126154][T11687] syzkaller0: entered allmulticast mode
[  118.151854][T11695] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.195909][T11695] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.282838][T11702] loop4: detected capacity change from 0 to 128
[  118.312620][T11695] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.375190][T11695] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.478842][T11719] syz_tun: entered promiscuous mode
[  118.484215][T11719] macsec1: entered allmulticast mode
[  118.489521][T11719] syz_tun: entered allmulticast mode
[  118.495419][T11719] syz_tun: left allmulticast mode
[  118.500463][T11719] syz_tun: left promiscuous mode
[  118.562111][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  118.956438][T11736] msdos: Unknown parameter '18446744073709551615��������01777777777777777777777��0xffffffffffffffff18446744073709551615������������������'
[  119.185003][ T8522] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.244979][ T8522] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.307788][ T8522] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.381455][ T8522] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.427718][T11764] lo speed is unknown, defaulting to 1000
[  119.451467][T11784] atomic_op ffff8881179b5128 conn xmit_atomic 0000000000000000
[  119.462686][ T8522] bridge_slave_1: left allmulticast mode
[  119.468412][ T8522] bridge_slave_1: left promiscuous mode
[  119.474054][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.492087][ T8522] bridge_slave_0: left allmulticast mode
[  119.497824][ T8522] bridge_slave_0: left promiscuous mode
[  119.503574][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.563322][ T8522] dvmrp8 (unregistering): left allmulticast mode
[  119.625263][ T8522] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.633889][ T8522] bond_slave_0: left promiscuous mode
[  119.640387][ T8522] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.649117][ T8522] bond_slave_1: left promiscuous mode
[  119.655746][ T8522] $H� (unregistering): Released all slaves
[  119.663657][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  119.674227][ T8522] bond0 (unregistering): Released all slaves
[  119.755581][T11764] chnl_net:caif_netlink_parms(): no params data found
[  119.768912][ T8522] hsr_slave_0: left promiscuous mode
[  119.775353][ T8522] hsr_slave_1: left promiscuous mode
[  119.781015][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.788515][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.796321][ T8522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.803735][ T8522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.813115][ T8522] veth1_macvtap: left promiscuous mode
[  119.818709][ T8522] veth0_macvtap: left promiscuous mode
[  119.824207][ T8522] veth1_vlan: left promiscuous mode
[  119.829530][ T8522] veth0_vlan: left promiscuous mode
[  119.903809][ T8522] team0 (unregistering): Port device team_slave_1 removed
[  119.913768][ T8522] team0 (unregistering): Port device team_slave_0 removed
[  119.953037][T11792] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.971411][T11796] program syz.2.2897 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.020610][T11792] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.032042][T11764] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.039158][T11764] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.046374][T11764] bridge_slave_0: entered allmulticast mode
[  120.052709][T11764] bridge_slave_0: entered promiscuous mode
[  120.059744][T11764] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.066812][T11764] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.074179][T11764] bridge_slave_1: entered allmulticast mode
[  120.080663][T11764] bridge_slave_1: entered promiscuous mode
[  120.100958][T11764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.113047][T11764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.132639][T11764] team0: Port device team_slave_0 added
[  120.139468][T11764] team0: Port device team_slave_1 added
[  120.147996][T11792] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.191248][T11764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.198295][T11764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.224212][T11764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.236105][T11764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.243044][T11764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.269076][T11764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.283345][T11792] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.308833][T11764] hsr_slave_0: entered promiscuous mode
[  120.316834][T11764] hsr_slave_1: entered promiscuous mode
[  120.323103][T11764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.331828][T11764] Cannot create hsr debugfs directory
[  120.350537][T11792] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.366948][T11792] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.379235][T11792] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.392069][T11792] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.679872][T11764] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  120.689510][T11764] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  120.698823][T11764] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  120.708748][T11764] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  120.746344][T11764] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.760192][T11764] 8021q: adding VLAN 0 to HW filter on device team0
[  120.770727][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.777794][ T8471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.786135][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  120.799278][T11764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.809702][T11764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.824213][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.831324][ T8471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.881564][T11764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.030470][T11764] veth0_vlan: entered promiscuous mode
[  121.047917][T11764] veth1_vlan: entered promiscuous mode
[  121.072865][T11764] veth0_macvtap: entered promiscuous mode
[  121.097625][T11764] veth1_macvtap: entered promiscuous mode
[  121.115151][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.125820][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.135816][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.146278][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.156213][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.166892][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.176872][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.187371][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.198160][T11764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.208973][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.219562][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.229391][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.239936][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.249930][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.260367][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.270291][T11764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.280722][T11764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.293849][T11764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.304167][T11764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.313004][T11764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.321801][T11764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.330562][T11764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.422779][T11972] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2912'.
[  121.435111][T11952] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2912'.
[  121.478112][T11981] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  121.500122][T11985] geneve0: entered allmulticast mode
[  121.548904][T11996] netlink: 'syz.0.2922': attribute type 1 has an invalid length.
[  121.734233][T12040] geneve0: entered allmulticast mode
[  121.774036][   T29] kauditd_printk_skb: 52 callbacks suppressed
[  121.774075][   T29] audit: type=1326 audit(1738492242.882:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  121.806288][   T29] audit: type=1326 audit(1738492242.912:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  121.829862][   T29] audit: type=1326 audit(1738492242.912:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  121.853329][   T29] audit: type=1326 audit(1738492242.912:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  121.882000][   T29] audit: type=1326 audit(1738492242.962:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  121.905637][   T29] audit: type=1326 audit(1738492242.962:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  121.906253][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  121.929264][   T29] audit: type=1326 audit(1738492242.962:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  121.994078][   T29] audit: type=1326 audit(1738492243.042:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  122.017810][   T29] audit: type=1326 audit(1738492243.042:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  122.041311][   T29] audit: type=1326 audit(1738492243.042:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  122.075338][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2941'.
[  122.084694][T12069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.335003][T12071] Set syz1 is full, maxelem 65536 reached
[  122.449245][T11695] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.472692][T11695] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.486291][T11695] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.510570][T11695] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.531697][T12144] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.2955'.
[  122.540946][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2955'.
[  122.561177][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2957'.
[  122.574545][T12148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.650139][T12163] loop9: detected capacity change from 0 to 512
[  122.663547][T12163] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  122.678486][T12163] EXT4-fs (loop9): 1 truncate cleaned up
[  122.688720][T12163] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.726306][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.064789][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  123.265865][T12254] netlink: 'syz.9.2980': attribute type 1 has an invalid length.
[  123.282968][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2981'.
[  123.300419][T12254] 8021q: adding VLAN 0 to HW filter on device bond4
[  123.358704][T12254] geneve2: entered allmulticast mode
[  123.366431][T12254] bond4: (slave geneve2): making interface the new active one
[  123.376461][T12254] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  123.996700][T12344] Unknown options in mask 5
[  124.038000][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'.
[  124.187020][T12366] SELinux:  Context � is not valid (left unmapped).
[  124.223813][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  124.253816][T12378] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12378 comm=syz.0.3014
[  124.309032][T12386] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.625947][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118528a00: rx timeout, send abort
[  124.634216][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888118528a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  124.887563][T12419] program syz.0.3041 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.931898][T12420] syzkaller0: entered promiscuous mode
[  124.937510][T12420] syzkaller0: entered allmulticast mode
[  124.947988][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3045'.
[  125.084381][T12456] netlink: 'syz.1.3051': attribute type 1 has an invalid length.
[  125.096781][T12456] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.110546][T12456] geneve2: entered allmulticast mode
[  125.118633][T12456] bond3: (slave geneve2): making interface the new active one
[  125.127689][T12456] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  125.333580][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  125.759112][T12478] Unknown options in mask 5
[  125.759979][T12473] syzkaller0: entered promiscuous mode
[  125.769405][T12473] syzkaller0: entered allmulticast mode
[  125.777883][T12476] tipc: Started in network mode
[  125.782767][T12476] tipc: Node identity ac14140f, cluster identity 4711
[  125.790342][T12476] tipc: New replicast peer: 255.255.255.255
[  125.796520][T12476] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.881171][T12488] netlink: 132 bytes leftover after parsing attributes in process `+}[@'.
[  125.890559][T12488] netlink: '+}[@': attribute type 10 has an invalid length.
[  126.146390][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3073'.
[  126.217956][T12525] SELinux:  policydb version 1869491299 does not match my version range 15-34
[  126.227204][T12525] SELinux: failed to load policy
[  126.229112][T12528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3084'.
[  126.246244][T12528] vlan2: entered promiscuous mode
[  126.251303][T12528] macvlan0: entered promiscuous mode
[  126.260803][T12528] macvlan0: left promiscuous mode
[  126.300962][T12535] block device autoloading is deprecated and will be removed.
[  126.425455][T12546] netlink: 'syz.1.3092': attribute type 1 has an invalid length.
[  126.433986][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  126.438639][T12546] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.763939][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'.
[  126.913512][T11819] tipc: Node number set to 2886997007
[  126.982166][T12589] netem: incorrect ge model size
[  126.987269][T12589] netem: change failed
[  127.543669][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  127.596447][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811384d000: rx timeout, send abort
[  127.604832][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811384d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  127.729956][   T29] kauditd_printk_skb: 122 callbacks suppressed
[  127.729983][   T29] audit: type=1326 audit(1738492248.832:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12606 comm="syz.0.3118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa73083cda9 code=0x0
[  127.781356][T12611] 9pnet_fd: Insufficient options for proto=fd
[  128.059146][T12650] lo speed is unknown, defaulting to 1000
[  128.260146][T12670] loop9: detected capacity change from 0 to 256
[  128.381268][   T29] audit: type=1400 audit(1738492249.482:3841): avc:  denied  { getopt } for  pid=12681 comm="syz.9.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  128.403116][   T29] audit: type=1326 audit(1738492249.512:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  128.426772][   T29] audit: type=1326 audit(1738492249.512:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  128.452558][   T29] audit: type=1326 audit(1738492249.512:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  128.476206][   T29] audit: type=1326 audit(1738492249.512:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  128.499684][   T29] audit: type=1326 audit(1738492249.532:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  128.523172][   T29] audit: type=1326 audit(1738492249.532:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  128.546730][   T29] audit: type=1326 audit(1738492249.532:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  128.570247][   T29] audit: type=1326 audit(1738492249.532:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  128.632297][T12688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3155'.
[  128.713981][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  128.748314][T12698] ip6tnl1: entered promiscuous mode
[  128.753611][T12698] ip6tnl1: entered allmulticast mode
[  129.027802][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'.
[  129.036826][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'.
[  129.074222][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'.
[  129.160015][T12727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3173'.
[  129.183604][T12727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3173'.
[  129.320914][T12751] syz_tun: entered allmulticast mode
[  129.327298][T12750] syz_tun: left allmulticast mode
[  129.338256][T12747] hub 6-0:1.0: USB hub found
[  129.342973][T12747] hub 6-0:1.0: 8 ports detected
[  129.420752][T12761] lo speed is unknown, defaulting to 1000
[  129.657539][T12776] loop9: detected capacity change from 0 to 256
[  129.676537][T12776] FAT-fs (loop9): bogus number of FAT sectors
[  129.682627][T12776] FAT-fs (loop9): Can't find a valid FAT filesystem
[  129.813924][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  130.087778][T12806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.923756][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  131.371471][T12877] block device autoloading is deprecated and will be removed.
[  131.438267][T12881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3236'.
[  131.449364][T12881] netlink: 'syz.1.3236': attribute type 10 has an invalid length.
[  131.735231][T12905] 9pnet_rdma: rdma_create_trans (12905): problem binding to privport: 13
[  132.037072][T12927] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3255'.
[  132.046144][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  132.050713][T12927] 0�X���: renamed from caif0
[  132.060486][T12927] 0�X���: entered allmulticast mode
[  132.065796][T12927] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  132.103765][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  132.112583][T12932] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check.
[  132.147323][T12939] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  132.615841][T12965] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3271'.
[  132.768492][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  132.768508][   T29] audit: type=1326 audit(1738492253.872:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  132.799748][   T29] audit: type=1326 audit(1738492253.872:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  132.823571][   T29] audit: type=1326 audit(1738492253.872:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  132.847071][   T29] audit: type=1326 audit(1738492253.872:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  132.870626][   T29] audit: type=1326 audit(1738492253.872:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  132.894137][   T29] audit: type=1326 audit(1738492253.872:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  132.917998][   T29] audit: type=1326 audit(1738492253.872:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  132.941596][   T29] audit: type=1326 audit(1738492253.872:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  132.965226][   T29] audit: type=1326 audit(1738492253.882:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  133.074040][T13009] netlink: 'syz.2.3287': attribute type 21 has an invalid length.
[  133.094065][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3287'.
[  133.303733][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  133.426447][ T2964] hid-generic 0081:8001:0009.0002: item fetching failed at offset 3/4
[  133.435052][ T2964] hid-generic 0081:8001:0009.0002: probe with driver hid-generic failed with error -22
[  133.494260][T13042] netlink: 'syz.1.3301': attribute type 21 has an invalid length.
[  133.531455][T13044] ebtables: ebtables: counters copy to user failed while replacing table
[  133.543413][T13050] 0�X���: renamed from caif0
[  133.550042][T13050] 0�X���: entered allmulticast mode
[  133.555333][T13050] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  133.648214][T13059] loop9: detected capacity change from 0 to 1024
[  133.655230][T13059] EXT4-fs: Ignoring removed orlov option
[  133.663354][T13059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.689393][T13059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.017345][T13074] bridge0: entered promiscuous mode
[  134.023093][T13074] __nla_validate_parse: 2 callbacks suppressed
[  134.023107][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3309'.
[  134.044469][T13074] bridge_slave_1: left allmulticast mode
[  134.050204][T13074] bridge_slave_1: left promiscuous mode
[  134.056080][T13074] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.093201][T13074] bridge_slave_0: left allmulticast mode
[  134.098911][T13074] bridge_slave_0: left promiscuous mode
[  134.104895][T13074] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.119172][T13074] bridge0 (unregistering): left promiscuous mode
[  134.362957][T13143] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.3329'.
[  134.403606][ T8467] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  135.359958][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'.
[  135.444761][   T29] audit: type=1400 audit(1738492256.552:3949): avc:  denied  { ioctl } for  pid=13245 comm="syz.5.3332" path="socket:[35653]" dev="sockfs" ino=35653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  135.543610][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  135.639032][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3350'.
[  135.662709][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3350'.
[  135.813390][T13280] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  135.832461][T13280] vhci_hcd: invalid port number 23
[  135.873591][T13285] Cannot find del_set index 0 as target
[  136.158327][T13308] loop9: detected capacity change from 0 to 1024
[  136.170527][T13308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  136.189593][T13308] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.208495][T13308] ext4: Unknown parameter '����������0xffffffffffffffff'
[  136.217617][T13308] SELinux: security_context_str_to_sid () failed with errno=-22
[  136.236002][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.271881][T13316] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  136.279374][T13316] vhci_hcd: invalid port number 23
[  136.326633][T13325] xt_hashlimit: max too large, truncated to 1048576
[  136.654201][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  136.664148][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3380'.
[  136.743172][T13356] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  136.751233][T13356] vhci_hcd: invalid port number 23
[  137.006026][T13396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.014546][T13396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.018730][T13398] netlink: 'syz.9.3394': attribute type 1 has an invalid length.
[  137.030033][T13398] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3394'.
[  137.045923][T13398] netlink: 'syz.9.3394': attribute type 1 has an invalid length.
[  137.053703][T13398] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3394'.
[  137.122757][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3398'.
[  137.159787][T13412] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3400'.
[  137.466365][T13445] loop9: detected capacity change from 0 to 256
[  137.480705][T13445] FAT-fs (loop9): Directory bread(block 64) failed
[  137.487495][T13445] FAT-fs (loop9): Directory bread(block 65) failed
[  137.494237][T13445] FAT-fs (loop9): Directory bread(block 66) failed
[  137.500753][T13445] FAT-fs (loop9): Directory bread(block 67) failed
[  137.507346][T13445] FAT-fs (loop9): Directory bread(block 68) failed
[  137.515666][T13445] FAT-fs (loop9): Directory bread(block 69) failed
[  137.522273][T13445] FAT-fs (loop9): Directory bread(block 70) failed
[  137.529168][T13445] FAT-fs (loop9): Directory bread(block 71) failed
[  137.537808][T13445] FAT-fs (loop9): Directory bread(block 72) failed
[  137.559752][T13445] FAT-fs (loop9): Directory bread(block 73) failed
[  137.763605][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  137.876943][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  137.876967][   T29] audit: type=1400 audit(1738492258.982:4015): avc:  denied  { getopt } for  pid=13476 comm="syz.9.3427" lport=58613 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  138.040099][   T29] audit: type=1326 audit(1738492259.142:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.073487][   T29] audit: type=1326 audit(1738492259.142:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.097103][   T29] audit: type=1326 audit(1738492259.142:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.120736][   T29] audit: type=1326 audit(1738492259.142:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.144249][   T29] audit: type=1326 audit(1738492259.142:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.167666][   T29] audit: type=1326 audit(1738492259.142:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.191250][   T29] audit: type=1326 audit(1738492259.142:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.214734][   T29] audit: type=1326 audit(1738492259.142:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.238197][   T29] audit: type=1326 audit(1738492259.172:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13494 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  138.297632][T13499] syzkaller0: entered promiscuous mode
[  138.303131][T13499] syzkaller0: entered allmulticast mode
[  138.755610][T13527] netlink: 'syz.0.3447': attribute type 4 has an invalid length.
[  138.873557][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  138.996982][T13561] hub 6-0:1.0: USB hub found
[  139.009366][T13561] hub 6-0:1.0: 8 ports detected
[  139.239385][T13583] netlink: 'syz.1.3473': attribute type 1 has an invalid length.
[  139.297440][T13583] 8021q: adding VLAN 0 to HW filter on device bond5
[  139.395505][T13586] bond5: (slave veth5): Enslaving as an active interface with a down link
[  139.880051][T13622] __nla_validate_parse: 10 callbacks suppressed
[  139.880089][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3490'.
[  140.005000][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  140.067074][T13634] loop9: detected capacity change from 0 to 512
[  140.107721][T13634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.176601][T13634] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.190689][T13640] tipc: Failed to remove unknown binding: 66,1,1/0:3917996353/3917996355
[  140.199224][T13640] tipc: Failed to remove unknown binding: 66,1,1/0:3917996353/3917996355
[  140.344835][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.544873][T13668] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  140.611075][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3515'.
[  141.123908][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  141.148189][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3539'.
[  141.328780][T13752] tipc: Failed to remove unknown binding: 66,1,1/0:2028780025/2028780027
[  141.337288][T13752] tipc: Failed to remove unknown binding: 66,1,1/0:2028780025/2028780027
[  141.473804][T13770] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3555'.
[  142.234682][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  142.371413][T13836] xt_connbytes: Forcing CT accounting to be enabled
[  142.379749][T13836] Cannot find add_set index 0 as target
[  142.753383][T13891] pim6reg1: entered promiscuous mode
[  142.758728][T13891] pim6reg1: entered allmulticast mode
[  142.879921][T13899] IPv6: Can't replace route, no match found
[  142.914675][   T29] kauditd_printk_skb: 181 callbacks suppressed
[  142.914689][   T29] audit: type=1326 audit(1738492264.022:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  142.945267][   T29] audit: type=1326 audit(1738492264.022:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  142.968933][   T29] audit: type=1326 audit(1738492264.022:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  142.992476][   T29] audit: type=1326 audit(1738492264.022:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  142.999972][T13906] xt_connbytes: Forcing CT accounting to be enabled
[  143.016074][   T29] audit: type=1326 audit(1738492264.022:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13902 comm="syz.2.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  143.025266][T13906] Cannot find add_set index 0 as target
[  143.062933][   T29] audit: type=1400 audit(1738492264.162:4211): avc:  denied  { shutdown } for  pid=13907 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  143.093026][   T29] audit: type=1400 audit(1738492264.192:4212): avc:  denied  { getopt } for  pid=13907 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  143.112643][   T29] audit: type=1400 audit(1738492264.192:4213): avc:  denied  { name_connect } for  pid=13907 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  143.151665][T13910] netlink: 'syz.2.3617': attribute type 1 has an invalid length.
[  143.171969][T13914] loop9: detected capacity change from 0 to 2048
[  143.180071][   T29] audit: type=1400 audit(1738492264.292:4214): avc:  denied  { mount } for  pid=13913 comm="syz.9.3619" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  143.226153][   T29] audit: type=1400 audit(1738492264.332:4215): avc:  denied  { unmount } for  pid=6544 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  143.260385][T13922] vlan0: entered allmulticast mode
[  143.265656][T13922] bridge_slave_0: entered allmulticast mode
[  143.275254][T13922] bridge_slave_0: left allmulticast mode
[  143.363695][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  143.472846][T13949] binfmt_misc: register: failed to install interpreter file ./file2
[  143.742671][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'.
[  143.763387][T13991] veth0_macvtap: left promiscuous mode
[  143.781133][T13997] ipip1: entered promiscuous mode
[  143.825816][T14004] SELinux:  Context system_u:object_r:fonts_t:s0 is not valid (left unmapped).
[  143.891128][T14008] lo speed is unknown, defaulting to 1000
[  144.016471][T14032] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.024826][T14032] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.033035][T14032] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.041289][T14032] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.050806][T14032] vxlan0: entered promiscuous mode
[  144.056118][T14032] vxlan0: entered allmulticast mode
[  144.065265][T14032] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.073655][T14032] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.082026][T14032] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.090504][T14032] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.104805][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3670'.
[  144.115670][T14039] veth0_macvtap: left promiscuous mode
[  144.156422][T14043] netlink: 'syz.2.3672': attribute type 1 has an invalid length.
[  144.164190][T14043] netlink: 'syz.2.3672': attribute type 4 has an invalid length.
[  144.172071][T14043] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.3672'.
[  144.493685][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  144.660284][T14094] netlink: 'syz.2.3696': attribute type 2 has an invalid length.
[  144.668087][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'.
[  144.795085][T14106] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  144.850154][T14112] Process accounting resumed
[  145.215435][T14127] TCP: out of memory -- consider tuning tcp_mem
[  145.479958][T14147] netlink: 'syz.1.3718': attribute type 29 has an invalid length.
[  145.506845][T14147] netlink: 'syz.1.3718': attribute type 29 has an invalid length.
[  145.542437][T14147] netlink: 516 bytes leftover after parsing attributes in process `syz.1.3718'.
[  145.594567][T14157] netlink: 'syz.2.3722': attribute type 3 has an invalid length.
[  145.615259][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  145.675901][T14164] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.684166][T14164] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.692327][T14164] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.700555][T14164] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.709291][T14164] vxlan0: entered promiscuous mode
[  145.714451][T14164] vxlan0: entered allmulticast mode
[  145.721121][T14164] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.729514][T14164] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.737916][T14164] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.746259][T14164] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.872367][T14176] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3734'.
[  146.070647][T14214] netlink: 'syz.9.3751': attribute type 3 has an invalid length.
[  146.360129][ T3379] IPVS: starting estimator thread 0...
[  146.410993][T14273] hub 5-0:1.0: USB hub found
[  146.415909][T14273] hub 5-0:1.0: 8 ports detected
[  146.453537][T14264] IPVS: using max 1968 ests per chain, 98400 per kthread
[  146.473057][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3781'.
[  146.489005][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3781'.
[  146.539753][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3784'.
[  146.548989][T14291] Process accounting resumed
[  146.618048][T14298] lo speed is unknown, defaulting to 1000
[  146.623929][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'.
[  146.635138][T14305] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  146.638018][T14307] loop9: detected capacity change from 0 to 128
[  146.644061][T14305] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  146.723576][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  147.462130][T14362] 9pnet_fd: Insufficient options for proto=fd
[  147.496355][T14365] hsr_slave_0: left promiscuous mode
[  147.511300][T14365] hsr_slave_1: left promiscuous mode
[  147.626571][T14385] only policy match revision 0 supported
[  147.626593][T14385] unable to load match
[  147.791800][T14394] lo speed is unknown, defaulting to 1000
[  147.824188][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  147.997773][   T29] kauditd_printk_skb: 196 callbacks suppressed
[  147.997785][   T29] audit: type=1326 audit(1738492269.102:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  148.058431][   T29] audit: type=1326 audit(1738492269.102:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  148.082021][   T29] audit: type=1326 audit(1738492269.102:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  148.105783][   T29] audit: type=1326 audit(1738492269.162:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  148.129278][   T29] audit: type=1326 audit(1738492269.162:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa92f7cda9 code=0x7ffc0000
[  148.152938][   T29] audit: type=1400 audit(1738492269.162:4417): avc:  denied  { create } for  pid=14409 comm="syz.5.3851" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  148.285448][   T29] audit: type=1400 audit(1738492269.162:4418): avc:  denied  { write } for  pid=14409 comm="syz.5.3851" name="file0" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  148.307989][   T29] audit: type=1400 audit(1738492269.162:4419): avc:  denied  { open } for  pid=14409 comm="syz.5.3851" path="/145/file0" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  148.330790][   T29] audit: type=1400 audit(1738492269.162:4420): avc:  denied  { ioctl } for  pid=14409 comm="syz.5.3851" path="/145/file0" dev="tmpfs" ino=767 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  148.355133][   T29] audit: type=1326 audit(1738492269.392:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.0.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  148.547732][T14417] IPv6: NLM_F_CREATE should be specified when creating new route
[  148.919718][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3866'.
[  148.941248][T14464] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  148.980963][T14472] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  148.989590][T14472] SELinux: failed to load policy
[  149.014422][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  149.098522][T14500] block device autoloading is deprecated and will be removed.
[  149.106454][T14500] syz.9.3881: attempt to access beyond end of device
[  149.106454][T14500] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  149.128763][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3882'.
[  149.289208][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3890'.
[  149.368153][T14526] lo speed is unknown, defaulting to 1000
[  149.484182][T14532] syz.5.3894: attempt to access beyond end of device
[  149.484182][T14532] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  149.540218][T14536] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3897'.
[  149.549292][T14536] netem: unknown loss type 13
[  149.554044][T14536] netem: change failed
[  149.689136][T14551] syzkaller0: entered allmulticast mode
[  149.699462][T14551] syzkaller0 (unregistering): left allmulticast mode
[  150.021216][T14578] netlink: 'syz.1.3916': attribute type 1 has an invalid length.
[  150.036959][T14578] 8021q: adding VLAN 0 to HW filter on device bond6
[  150.058297][T14578] bond6: (slave gretap0): making interface the new active one
[  150.066709][T14578] bond6: (slave gretap0): Enslaving as an active interface with an up link
[  150.143696][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  150.211979][T14599] tipc: New replicast peer: 255.255.255.0
[  150.217972][T14599] tipc: Enabled bearer <udp:syz>, priority 10
[  150.486440][T14646] hub 6-0:1.0: USB hub found
[  150.491143][T14646] hub 6-0:1.0: 8 ports detected
[  150.616106][T14659] __nla_validate_parse: 1 callbacks suppressed
[  150.616122][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3949'.
[  150.666284][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3950'.
[  150.736981][T14668] loop0: detected capacity change from 0 to 512
[  150.768840][T14668] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3953: corrupted in-inode xattr: invalid ea_ino
[  150.786078][T14668] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3953: couldn't read orphan inode 15 (err -117)
[  150.798565][T14668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.866052][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.093309][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.103620][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.178315][T14706] netlink: 'syz.2.3969': attribute type 1 has an invalid length.
[  151.207351][T14706] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.254582][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  151.268191][T14703] lo speed is unknown, defaulting to 1000
[  151.286559][T14709] bond2: (slave gretap2): making interface the new active one
[  151.312543][T14709] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  151.375012][T14717] xt_hashlimit: size too large, truncated to 1048576
[  151.729573][T14747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.743743][T14746] 9pnet_fd: Insufficient options for proto=fd
[  151.775761][T14747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.780133][T14739] lo speed is unknown, defaulting to 1000
[  151.829659][T14758] bond_slave_1: entered promiscuous mode
[  151.836015][T14757] bond_slave_1: left promiscuous mode
[  152.106687][T14793] loop0: detected capacity change from 0 to 128
[  152.277263][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4014'.
[  152.373724][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  152.614815][T14846] lo speed is unknown, defaulting to 1000
[  153.143278][T14850] Set syz1 is full, maxelem 65536 reached
[  153.215861][T14866] lo speed is unknown, defaulting to 1000
[  153.256213][T14878] netlink: 'syz.9.4043': attribute type 3 has an invalid length.
[  153.418080][   T29] kauditd_printk_skb: 200 callbacks suppressed
[  153.418094][   T29] audit: type=1400 audit(1738492274.522:4622): avc:  denied  { create } for  pid=14895 comm="syz.9.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  153.420236][T14893] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  153.427522][   T29] audit: type=1400 audit(1738492274.532:4623): avc:  denied  { write } for  pid=14895 comm="syz.9.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  153.474140][T14897] netlink: 'syz.1.4052': attribute type 10 has an invalid length.
[  153.474652][T14896] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  153.482012][T14897] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.494288][T14896] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  153.496157][T14897] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.584013][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  153.636387][   T29] audit: type=1400 audit(1738492274.742:4624): avc:  denied  { ioctl } for  pid=14900 comm="syz.9.4054" path="socket:[41289]" dev="sockfs" ino=41289 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  153.717077][   T29] audit: type=1400 audit(1738492274.822:4625): avc:  denied  { read } for  pid=14902 comm="syz.9.4055" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  153.717113][   T29] audit: type=1400 audit(1738492274.822:4626): avc:  denied  { open } for  pid=14902 comm="syz.9.4055" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  153.742387][   T29] audit: type=1326 audit(1738492274.822:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14904 comm="syz.1.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  153.742414][   T29] audit: type=1326 audit(1738492274.822:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14904 comm="syz.1.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  153.742466][   T29] audit: type=1326 audit(1738492274.822:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14904 comm="syz.1.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  153.742493][   T29] audit: type=1326 audit(1738492274.822:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14904 comm="syz.1.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  153.742533][   T29] audit: type=1326 audit(1738492274.822:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14904 comm="syz.1.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  154.124029][T14935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14935 comm=syz.9.4069
[  154.124371][T14935] netlink: 'syz.9.4069': attribute type 1 has an invalid length.
[  154.135775][T14935] 8021q: adding VLAN 0 to HW filter on device bond5
[  154.186573][T14943] bond5: (slave ip6gretap2): making interface the new active one
[  154.197424][T14943] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[  154.465513][T14979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14979 comm=syz.1.4087
[  154.492035][T14979] netlink: 'syz.1.4087': attribute type 1 has an invalid length.
[  154.533588][T14979] 8021q: adding VLAN 0 to HW filter on device bond7
[  154.569406][T14985] bond7: (slave ip6gretap1): making interface the new active one
[  154.604477][T14985] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  154.723833][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  154.830711][T15007] siw: device registration error -23
[  154.971212][T15022] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4108'.
[  155.190945][T15039] lo speed is unknown, defaulting to 1000
[  155.739599][T15086] netlink: 'syz.2.4135': attribute type 7 has an invalid length.
[  155.747384][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4135'.
[  155.864264][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  156.175385][T15115] netlink: 'syz.0.4149': attribute type 4 has an invalid length.
[  156.183161][T15115] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4149'.
[  156.434730][T15141] xt_CT: You must specify a L4 protocol and not use inversions on it
[  156.606598][T15155] netlink: 'syz.1.4168': attribute type 3 has an invalid length.
[  156.628897][T15157] loop9: detected capacity change from 0 to 512
[  156.646119][T15157] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  156.657676][T15157] EXT4-fs (loop9): 1 truncate cleaned up
[  156.668538][T15157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.758575][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.792644][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'.
[  156.806183][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'.
[  156.983765][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  157.069481][T15202] Invalid ELF header magic: != ELF
[  157.181592][T15219] xt_connbytes: Forcing CT accounting to be enabled
[  157.192188][T15219] Cannot find add_set index 0 as target
[  157.271735][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4207'.
[  157.333009][T15247] block device autoloading is deprecated and will be removed.
[  157.371391][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4213'.
[  157.387827][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4213'.
[  157.419519][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4213'.
[  157.443725][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4213'.
[  157.445280][T15254] loop0: detected capacity change from 0 to 4096
[  157.482271][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4213'.
[  157.508028][T15254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.553767][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.598538][T15264] xt_connbytes: Forcing CT accounting to be enabled
[  157.615086][T15268] loop9: detected capacity change from 0 to 2048
[  157.625007][T15264] Cannot find add_set index 0 as target
[  157.679469][T15268] Alternate GPT is invalid, using primary GPT.
[  157.685897][T15268]  loop9: p2 p3 p7
[  157.735571][T15275] syz.1.4221 (15275) used greatest stack depth: 8016 bytes left
[  157.924733][T15309] loop0: detected capacity change from 0 to 2048
[  157.940991][T15315] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  157.954684][T15309]  loop0: p1 < > p4
[  157.955113][T15309] loop0: p4 size 8388608 extends beyond EOD, truncated
[  158.022757][T15323] syzkaller0: entered promiscuous mode
[  158.028413][T15323] syzkaller0: entered allmulticast mode
[  158.036134][ T8471] syzkaller0: tun_net_xmit 48
[  158.048713][T15323] syzkaller0: tun_chr_ioctl cmd 1074025677
[  158.054595][T15323] syzkaller0: Linktype set failed because interface is up
[  158.083694][ T8467] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  158.326978][T15339] syzkaller1: entered promiscuous mode
[  158.332595][T15339] syzkaller1: entered allmulticast mode
[  158.357621][T15342] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  158.413042][T15354] loop9: detected capacity change from 0 to 512
[  158.437902][T15354] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #4: comm syz.9.4258: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 9(4), depth 0(0)
[  158.468797][T15354] EXT4-fs error (device loop9): ext4_quota_enable:7104: comm syz.9.4258: Bad quota inode: 4, type: 1
[  158.483540][T15354] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  158.501371][T15354] EXT4-fs (loop9): mount failed
[  158.562976][T15373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15373 comm=syz.5.4269
[  158.577729][T15373] netlink: 'syz.5.4269': attribute type 1 has an invalid length.
[  158.601104][T15373] bond1: entered promiscuous mode
[  158.606237][T15373] bond1: entered allmulticast mode
[  158.619465][T15373] batadv1: entered promiscuous mode
[  158.627273][T15373] 8021q: adding VLAN 0 to HW filter on device batadv1
[  158.636108][T15373] bond1: (slave batadv1): making interface the new active one
[  158.643844][T15373] batadv1: entered allmulticast mode
[  158.652018][T15373] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  158.717019][T15383] netlink: 'syz.5.4273': attribute type 1 has an invalid length.
[  158.725256][   T29] kauditd_printk_skb: 132 callbacks suppressed
[  158.725270][   T29] audit: type=1326 audit(1738492279.832:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.770504][T15383] 8021q: adding VLAN 0 to HW filter on device bond2
[  158.779330][   T29] audit: type=1326 audit(1738492279.832:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.802922][   T29] audit: type=1326 audit(1738492279.832:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.826539][   T29] audit: type=1326 audit(1738492279.832:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.841734][T15393] 8021q: adding VLAN 0 to HW filter on device batadv2
[  158.850012][   T29] audit: type=1326 audit(1738492279.832:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.850042][   T29] audit: type=1326 audit(1738492279.832:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.850069][   T29] audit: type=1326 audit(1738492279.832:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.850119][   T29] audit: type=1326 audit(1738492279.832:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.850143][   T29] audit: type=1326 audit(1738492279.832:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  158.933255][T15393] bond2: (slave batadv2): making interface the new active one
[  158.950993][   T29] audit: type=1326 audit(1738492279.832:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15384 comm="syz.9.4274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  159.007460][T15393] bond2: (slave batadv2): Enslaving as an active interface with an up link
[  159.095376][T15403] loop9: detected capacity change from 0 to 1024
[  159.106019][T15403] EXT4-fs: Ignoring removed orlov option
[  159.122748][T15403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.161393][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.291205][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  159.508307][T15459] syz_tun: entered allmulticast mode
[  159.514093][T15458] syz_tun: left allmulticast mode
[  159.705619][T15494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15494 comm=syz.5.4322
[  159.718159][T15494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15494 comm=syz.5.4322
[  160.119370][T15562] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  160.125996][T15562] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  160.133659][T15562] vhci_hcd vhci_hcd.0: Device attached
[  160.141753][T15565] vhci_hcd: connection closed
[  160.142106][ T8474] vhci_hcd: stop threads
[  160.151190][ T8474] vhci_hcd: release socket
[  160.155725][ T8474] vhci_hcd: disconnect device
[  160.403524][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  160.702754][T15581] loop9: detected capacity change from 0 to 8192
[  160.984146][T15605] loop0: detected capacity change from 0 to 512
[  160.994033][T15605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.007035][T15605] ext4 filesystem being mounted at /882/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  161.107744][T15605] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.4370: corrupted inode contents
[  161.120698][T15605] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.4370: mark_inode_dirty error
[  161.134115][T15605] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.4370: corrupted inode contents
[  161.146465][T15605] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.4370: mark_inode_dirty error
[  161.158787][T15605] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.4370: mark inode dirty (error -117)
[  161.172486][T15605] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117)
[  161.196395][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.250031][T15627] syz_tun: entered allmulticast mode
[  161.258642][T15626] syz_tun: left allmulticast mode
[  161.357580][T15629] lo speed is unknown, defaulting to 1000
[  161.514132][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  161.817499][T15659] netlink: 'syz.9.4392': attribute type 1 has an invalid length.
[  161.862828][T15659] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.933342][T15665] 8021q: adding VLAN 0 to HW filter on device batadv2
[  162.001723][T15665] bond6: (slave batadv2): making interface the new active one
[  162.051752][T15665] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  162.146877][T15687] __nla_validate_parse: 7 callbacks suppressed
[  162.146946][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4404'.
[  162.262089][T15704] loop0: detected capacity change from 0 to 2048
[  162.282412][T15702] usb usb7: usbfs: process 15702 (syz.2.4413) did not claim interface 0 before use
[  162.313894][T15704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.356072][T15716] netlink: 'syz.2.4418': attribute type 1 has an invalid length.
[  162.370068][T15716] 8021q: adding VLAN 0 to HW filter on device bond3
[  162.380662][T15704] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.4412: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  162.404038][T15719] netlink: 'syz.1.4417': attribute type 1 has an invalid length.
[  162.418880][T15716] bond3: (slave gretap3): making interface the new active one
[  162.427298][T15716] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  162.444572][T15719] 8021q: adding VLAN 0 to HW filter on device bond8
[  162.466492][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.520203][T15719] 8021q: adding VLAN 0 to HW filter on device batadv2
[  162.530698][T15719] bond8: (slave batadv2): making interface the new active one
[  162.542627][T15719] bond8: (slave batadv2): Enslaving as an active interface with an up link
[  162.604561][T15728] loop0: detected capacity change from 0 to 1024
[  162.618774][T15728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.634574][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  162.767116][T15728] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  162.767284][T15747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4430'.
[  162.783483][T15728] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  162.791716][T15747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4430'.
[  162.803332][T15728] EXT4-fs (loop0): This should not happen!! Data will be lost
[  162.803332][T15728] 
[  162.803350][T15728] EXT4-fs (loop0): Total free blocks count 0
[  162.828118][T15728] EXT4-fs (loop0): Free/Dirty block details
[  162.834184][T15728] EXT4-fs (loop0): free_blocks=68451041280
[  162.840009][T15728] EXT4-fs (loop0): dirty_blocks=2112
[  162.845297][T15728] EXT4-fs (loop0): Block reservation details
[  162.851283][T15728] EXT4-fs (loop0): i_reserved_data_blocks=132
[  162.938331][ T8522] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  163.023286][T15764] Cannot find set identified by id 632 to match
[  163.140713][T15783] 9pnet: p9_errstr2errno: server reported unknown error ZO��~�t%u*�jjX�d8��S�4R������_
[  163.158059][T15787] netlink: 'syz.9.4449': attribute type 1 has an invalid length.
[  163.165823][T15787] netlink: 'syz.9.4449': attribute type 2 has an invalid length.
[  163.197186][T15791] syz.5.4451: attempt to access beyond end of device
[  163.197186][T15791] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  163.311662][T15807] loop7: detected capacity change from 0 to 16384
[  163.329836][T15810] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  163.340202][T15810] batman_adv: batadv0: Adding interface: ip6gretap2
[  163.346915][T15810] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.372583][T15810] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[  163.493486][T15811] loop7: detected capacity change from 16384 to 16383
[  163.504003][T15811] I/O error, dev loop7, sector 8352 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  163.513991][T15811] Buffer I/O error on dev loop7, logical block 1044, lost async page write
[  163.522674][T15811] Buffer I/O error on dev loop7, logical block 1045, lost async page write
[  163.531292][T15811] Buffer I/O error on dev loop7, logical block 1046, lost async page write
[  163.539918][T15811] Buffer I/O error on dev loop7, logical block 1047, lost async page write
[  163.548612][T15811] Buffer I/O error on dev loop7, logical block 1048, lost async page write
[  163.557286][T15811] Buffer I/O error on dev loop7, logical block 1049, lost async page write
[  163.565954][T15811] Buffer I/O error on dev loop7, logical block 1050, lost async page write
[  163.574603][T15811] Buffer I/O error on dev loop7, logical block 1051, lost async page write
[  163.583226][T15811] Buffer I/O error on dev loop7, logical block 1052, lost async page write
[  163.591832][T15811] Buffer I/O error on dev loop7, logical block 1053, lost async page write
[  163.606234][T15811] I/O error, dev loop7, sector 9376 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  163.619067][T15811] I/O error, dev loop7, sector 10400 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  163.632132][T15811] I/O error, dev loop7, sector 11424 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  163.644876][T15811] I/O error, dev loop7, sector 12448 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  163.658439][T15811] I/O error, dev loop7, sector 13472 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  163.671220][T15811] I/O error, dev loop7, sector 14496 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  163.683859][T15811] I/O error, dev loop7, sector 15520 op 0x1:(WRITE) flags 0x800 phys_seg 108 prio class 0
[  163.720355][T15811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  163.736992][T15811] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  163.746242][T15811]  loop7: unable to read partition table
[  163.753516][T15811] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  163.754590][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  163.928766][   T29] kauditd_printk_skb: 258 callbacks suppressed
[  163.928783][   T29] audit: type=1326 audit(1738492285.032:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  163.958519][   T29] audit: type=1326 audit(1738492285.032:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  163.982172][   T29] audit: type=1326 audit(1738492285.032:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  164.005654][   T29] audit: type=1326 audit(1738492285.032:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  164.029160][   T29] audit: type=1326 audit(1738492285.032:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  164.052660][   T29] audit: type=1326 audit(1738492285.032:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  164.076056][   T29] audit: type=1326 audit(1738492285.032:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  164.100398][   T29] audit: type=1326 audit(1738492285.032:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  164.123923][   T29] audit: type=1326 audit(1738492285.032:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  164.154910][   T29] audit: type=1326 audit(1738492285.032:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f442af4cda9 code=0x7ffc0000
[  164.350842][T15888] loop7: detected capacity change from 0 to 16384
[  164.406213][T15898] loop0: detected capacity change from 0 to 1024
[  164.425712][T15898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.481084][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.503680][T15899] loop7: detected capacity change from 16384 to 16383
[  164.551813][T15899]  loop7: unable to read partition table
[  164.557813][T15899] loop_reread_partitions: partition scan of loop7 (R%0���T�$7�)]W����?�18��;9��C?��-��z׌����	������97d���) failed (rc=-5)
[  164.559172][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4507'.
[  164.714559][T15940] msdos: Unknown parameter '����������01777777777777777777777�0xffffffffffffffff18446744073709551615�������������������3���Pq{�P
[  164.714559][T15940] n'�|$@OO����-��+�el'
[  164.748044][T15942] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4517'.
[  164.770340][T15942] 1�X���: renamed from 
60�X���
[  164.778387][T15942] A link change request failed with some changes committed already. Interface 
61�X��� may have been left with an inconsistent configuration, please check.
[  164.841508][T15952] loop0: detected capacity change from 0 to 512
[  164.858921][T15958] IPv6: Can't replace route, no match found
[  164.866890][T15952] EXT4-fs (loop0): too many log groups per flexible block group
[  164.874676][T15952] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  164.884607][T15952] EXT4-fs (loop0): mount failed
[  164.923643][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  164.955300][T15971] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4530'.
[  164.991891][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4535'.
[  165.037024][T15990] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[  165.335714][T16051] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4553'.
[  165.383536][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  165.895412][T16178] 
: renamed from bond0 (while UP)
[  166.024614][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  166.048887][T16157] lo speed is unknown, defaulting to 1000
[  166.074062][T16215] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.132447][T16215] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.190762][T16221] ebtables: ebtables: counters copy to user failed while replacing table
[  166.202244][T16215] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.223694][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4595'.
[  166.239923][T16157] chnl_net:caif_netlink_parms(): no params data found
[  166.257089][T16215] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.303223][T16248] SELinux:  Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped).
[  166.343010][T16157] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.350414][T16157] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.372380][T16157] bridge_slave_0: entered allmulticast mode
[  166.391844][T16157] bridge_slave_0: entered promiscuous mode
[  166.399816][T16157] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.407035][T16157] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.416701][T16157] bridge_slave_1: entered allmulticast mode
[  166.423075][T16157] bridge_slave_1: entered promiscuous mode
[  166.429541][T16255] netem: incorrect gi model size
[  166.434591][T16255] netem: change failed
[  166.450636][T16215] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.481653][T16215] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.501336][T16157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.514880][T16215] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.524883][T16157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.537239][T16215] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.561501][T16157] team0: Port device team_slave_0 added
[  166.574837][T16157] team0: Port device team_slave_1 added
[  166.606388][T16157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.612533][T16271] loop0: detected capacity change from 0 to 4096
[  166.613314][T16157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.645613][T16157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.670508][T16271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.686615][T16157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.693631][T16157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.719655][T16157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.753294][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.755318][T16157] hsr_slave_0: entered promiscuous mode
[  166.768313][T16157] hsr_slave_1: entered promiscuous mode
[  166.774530][T16157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.784979][T16157] Cannot create hsr debugfs directory
[  166.831184][T16286] SELinux: syz.9.4618 (16286) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  166.879781][T16295] hub 9-0:1.0: USB hub found
[  166.884856][T16295] hub 9-0:1.0: 8 ports detected
[  166.893618][T16291] netlink: 'syz.2.4620': attribute type 21 has an invalid length.
[  166.942655][T16157] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.021226][T16157] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.070790][T16312] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4629'.
[  167.099878][T16157] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.173584][ T8499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  167.217647][T16157] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.319738][T16333] loop9: detected capacity change from 0 to 128
[  167.339972][T16157] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  167.347834][T16333] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  167.377983][T16157] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  167.390608][T16333] FAT-fs (loop9): FAT read failed (blocknr 128)
[  167.399643][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4639'.
[  167.399663][T16157] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  167.464712][T16157] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  167.535677][T16157] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.550947][T16157] 8021q: adding VLAN 0 to HW filter on device team0
[  167.564054][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.571226][ T8499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.601228][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.608311][ T8499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.725018][T16157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.856800][T16157] veth0_vlan: entered promiscuous mode
[  167.867733][T16157] veth1_vlan: entered promiscuous mode
[  167.887192][T16157] veth0_macvtap: entered promiscuous mode
[  167.895531][T16157] veth1_macvtap: entered promiscuous mode
[  167.910116][T16157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.920662][T16157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.930593][T16157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.941097][T16157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.950962][T16157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.961402][T16157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.973288][T16157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.981633][T16157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.992101][T16157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.001923][T16157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.012422][T16157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.022276][T16157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.032767][T16157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.042605][T16157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.053077][T16157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.063118][T16157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.073598][T16157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.087152][T16157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.099885][T16157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.108688][T16157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.117425][T16157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.126160][T16157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.319556][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  168.494927][T16434] netlink: 'syz.0.4675': attribute type 12 has an invalid length.
[  168.714480][T16463] loop0: detected capacity change from 0 to 512
[  168.723013][T16463] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  168.736313][T16463] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[  168.750020][T16463] EXT4-fs error (device loop0): ext4_orphan_get:1389: comm syz.0.4688: inode #15: comm syz.0.4688: iget: illegal inode #
[  168.769304][T16463] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4688: couldn't read orphan inode 15 (err -117)
[  168.787229][T16463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.811444][T16472] syzkaller0: tun_chr_ioctl cmd 2147767520
[  168.836678][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.967908][T16495] bond4: entered promiscuous mode
[  168.973085][T16495] bond4: entered allmulticast mode
[  168.979171][T16495] 8021q: adding VLAN 0 to HW filter on device bond4
[  168.989449][T16498] 9pnet: p9_errstr2errno: server reported unknown error �@�΂�(����Q�Nd

[  168.990032][T16495] bond4 (unregistering): Released all slaves
[  169.127085][   T29] kauditd_printk_skb: 246 callbacks suppressed
[  169.127101][   T29] audit: type=1400 audit(1738492290.232:5288): avc:  denied  { listen } for  pid=16512 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  169.168640][   T29] audit: type=1400 audit(1738492290.272:5289): avc:  denied  { accept } for  pid=16512 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  169.210625][   T29] audit: type=1400 audit(1738492290.312:5290): avc:  denied  { ioctl } for  pid=16517 comm="syz.2.4713" path="socket:[45967]" dev="sockfs" ino=45967 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  169.248036][T16520] xt_TPROXY: Can be used only with -p tcp or -p udp
[  169.269646][   T29] audit: type=1326 audit(1738492290.372:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.1.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  169.309641][   T29] audit: type=1326 audit(1738492290.402:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.1.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  169.333165][   T29] audit: type=1326 audit(1738492290.402:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.1.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  169.356700][   T29] audit: type=1326 audit(1738492290.402:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.1.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  169.380203][   T29] audit: type=1326 audit(1738492290.402:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.1.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  169.403884][   T29] audit: type=1326 audit(1738492290.402:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.1.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  169.427421][   T29] audit: type=1326 audit(1738492290.402:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.1.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  169.453638][ T8488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  169.554832][T16536] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4722'.
[  169.597706][T16542] bridge0: entered allmulticast mode
[  169.959151][T16576] netlink: 'syz.0.4740': attribute type 11 has an invalid length.
[  170.031237][T16588] block device autoloading is deprecated and will be removed.
[  170.053139][T16588] syz.0.4744: attempt to access beyond end of device
[  170.053139][T16588] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  170.110939][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4751'.
[  170.128284][T16596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4749'.
[  170.168048][T16602] loop0: detected capacity change from 0 to 512
[  170.186416][T16602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  170.215627][T16600] lo speed is unknown, defaulting to 1000
[  170.256557][T16602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  170.283529][T16602] ext4 filesystem being mounted at /949/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.355683][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  170.563690][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  170.616748][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4762'.
[  170.637152][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4761'.
[  170.741320][T16637] loop0: detected capacity change from 0 to 164
[  170.767714][T16637] Unable to read rock-ridge attributes
[  170.799296][T16637] Unable to read rock-ridge attributes
[  170.812830][T16645] bond1: entered promiscuous mode
[  170.817976][T16645] bond1: entered allmulticast mode
[  170.823746][T16645] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.834526][T16645] bond1 (unregistering): Released all slaves
[  170.881261][T16655] gretap0: entered promiscuous mode
[  170.896277][T16655] gretap0: left promiscuous mode
[  171.031044][T16679] loop9: detected capacity change from 0 to 512
[  171.031683][T16679] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  171.051787][T16679] EXT4-fs (loop9): warning: maximal mount count reached, running e2fsck is recommended
[  171.052160][T16679] EXT4-fs error (device loop9): ext4_orphan_get:1389: comm syz.9.4785: inode #15: comm syz.9.4785: iget: illegal inode #
[  171.052275][T16679] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.4785: couldn't read orphan inode 15 (err -117)
[  171.052693][T16679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.121920][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.206928][T16694] bond0: entered promiscuous mode
[  171.206942][T16694] bond0: entered allmulticast mode
[  171.208288][T16694] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.236039][T16694] bond0 (unregistering): Released all slaves
[  171.724220][ T8474] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  171.919935][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4817'.
[  172.017521][T16735] netlink: 'syz.2.4809': attribute type 1 has an invalid length.
[  172.069464][T16735] 8021q: adding VLAN 0 to HW filter on device bond4
[  172.081923][T16741] 8021q: adding VLAN 0 to HW filter on device bond4
[  172.100234][T16741] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  172.112705][T16741] bond4: (slave wireguard1): Error -95 calling set_mac_address
[  172.668663][T16820] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.4846' sets config #1
[  172.833585][ T8488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  173.036335][T16841] hsr_slave_0: left promiscuous mode
[  173.042224][T16841] hsr_slave_1: left promiscuous mode
[  173.693398][T16908] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16908 comm=syz.9.4887
[  173.734994][T16914] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  173.741525][T16914] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  173.748539][T16914] hsr_slave_0: left promiscuous mode
[  173.754376][T16914] hsr_slave_1: left promiscuous mode
[  173.786400][T16918] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4890'.
[  173.868516][T16930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.880852][T16930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.963908][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  174.177262][   T29] kauditd_printk_skb: 242 callbacks suppressed
[  174.177278][   T29] audit: type=1326 audit(1738492295.282:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.207807][   T29] audit: type=1326 audit(1738492295.282:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.231348][   T29] audit: type=1326 audit(1738492295.282:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.254857][   T29] audit: type=1326 audit(1738492295.282:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.278591][   T29] audit: type=1326 audit(1738492295.282:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.302193][   T29] audit: type=1326 audit(1738492295.282:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.325732][   T29] audit: type=1326 audit(1738492295.282:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.349218][   T29] audit: type=1326 audit(1738492295.282:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.372854][   T29] audit: type=1326 audit(1738492295.282:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.396251][   T29] audit: type=1326 audit(1738492295.282:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16976 comm="syz.5.4918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55891cda9 code=0x7ffc0000
[  174.564680][T16994] loop9: detected capacity change from 0 to 1024
[  174.593894][T16994] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.719731][T17013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17013 comm=syz.1.4933
[  174.738856][T16994] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  174.753958][T16994] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  174.766424][T16994] EXT4-fs (loop9): This should not happen!! Data will be lost
[  174.766424][T16994] 
[  174.776073][T16994] EXT4-fs (loop9): Total free blocks count 0
[  174.782047][T16994] EXT4-fs (loop9): Free/Dirty block details
[  174.787983][T16994] EXT4-fs (loop9): free_blocks=68451041280
[  174.793807][T16994] EXT4-fs (loop9): dirty_blocks=3904
[  174.799110][T16994] EXT4-fs (loop9): Block reservation details
[  174.805147][T16994] EXT4-fs (loop9): i_reserved_data_blocks=244
[  174.925185][ T8522] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  174.976971][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4941'.
[  175.017133][T17037] netlink: 2808 bytes leftover after parsing attributes in process `syz.2.4942'.
[  175.026627][T17037] netlink: 472 bytes leftover after parsing attributes in process `syz.2.4942'.
[  175.035838][T17030] lo speed is unknown, defaulting to 1000
[  175.073741][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  175.106174][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4944'.
[  175.118083][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4944'.
[  175.215075][T17059] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  175.247024][T17063] IPv6: Can't replace route, no match found
[  175.419469][T17085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4961'.
[  175.430728][T17078] lo speed is unknown, defaulting to 1000
[  175.709878][T17116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4976'.
[  175.718911][T17116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4976'.
[  175.903223][T17130] lo speed is unknown, defaulting to 1000
[  176.196531][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  176.819028][T17228] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5008'.
[  177.323924][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  177.379570][T17296] netlink: 'syz.5.5017': attribute type 3 has an invalid length.
[  177.548945][T17309] loop9: detected capacity change from 0 to 8192
[  177.569624][T17309] syz.9.5021: attempt to access beyond end of device
[  177.569624][T17309] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  177.588630][T17309] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1)
[  177.596481][T17309] FAT-fs (loop9): Filesystem has been set read-only
[  177.605963][T17309] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1)
[  177.614697][T17323] netlink: 'syz.2.5023': attribute type 25 has an invalid length.
[  177.631804][T17323] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.638923][T17309] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1)
[  177.640233][T17323] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.656271][T17323] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.664488][T17323] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.694911][T17332] netlink: 'syz.0.5029': attribute type 6 has an invalid length.
[  178.433899][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  179.221502][T17450] loop9: detected capacity change from 0 to 512
[  179.232606][T17450] EXT4-fs (loop9): orphan cleanup on readonly fs
[  179.239406][T17450] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  179.254237][T17450] EXT4-fs (loop9): Cannot turn on quotas: error -22
[  179.260948][T17450] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #13: comm syz.9.5078: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  179.278945][T17450] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.5078: couldn't read orphan inode 13 (err -117)
[  179.291455][T17450] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  179.307203][T17450] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  179.316959][T17450] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 2
[  179.338116][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.409371][T17466] __nla_validate_parse: 5 callbacks suppressed
[  179.409386][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5085'.
[  179.431807][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88811897d800: rx timeout, send abort
[  179.440266][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811897d800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[  179.480641][   T29] kauditd_printk_skb: 463 callbacks suppressed
[  179.480654][   T29] audit: type=1400 audit(1738492300.582:6013): avc:  denied  { mount } for  pid=17468 comm="syz.0.5087" name="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  179.524616][   T29] audit: type=1400 audit(1738492300.622:6014): avc:  denied  { search } for  pid=17468 comm="syz.0.5087" name="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  179.546945][   T29] audit: type=1400 audit(1738492300.622:6015): avc:  denied  { read } for  pid=17468 comm="syz.0.5087" name="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  179.569034][   T29] audit: type=1400 audit(1738492300.622:6016): avc:  denied  { open } for  pid=17468 comm="syz.0.5087" path="/" dev="configfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  179.569372][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  179.631762][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5093'.
[  179.690164][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5098'.
[  180.535949][T17518] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.593616][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5110'.
[  180.611488][T17530] rdma_rxe: rxe_newlink: failed to add tunl0
[  180.611587][T17518] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.638941][   T29] audit: type=1326 audit(1738492301.722:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17531 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  180.662811][   T29] audit: type=1326 audit(1738492301.722:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17531 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  180.686451][   T29] audit: type=1326 audit(1738492301.722:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17531 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  180.710000][ T8471] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  180.717740][   T29] audit: type=1326 audit(1738492301.722:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17531 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  180.741233][   T29] audit: type=1326 audit(1738492301.722:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17531 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  180.764938][   T29] audit: type=1326 audit(1738492301.732:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17531 comm="syz.1.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2807ccda9 code=0x7ffc0000
[  180.829282][T17518] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.839760][T17550] loop0: detected capacity change from 0 to 2048
[  180.846589][T17548] netlink: 'syz.9.5120': attribute type 4 has an invalid length.
[  180.864759][T17550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.886305][T17518] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.904025][T17553] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  180.950101][T17518] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.964350][T17518] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.978462][T17518] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.989717][T17518] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.038847][T17550] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  181.051210][T17550] EXT4-fs (loop0): This should not happen!! Data will be lost
[  181.051210][T17550] 
[  181.060870][T17550] EXT4-fs (loop0): Total free blocks count 0
[  181.066429][T17559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5123'.
[  181.066892][T17550] EXT4-fs (loop0): Free/Dirty block details
[  181.081754][T17550] EXT4-fs (loop0): free_blocks=2415919104
[  181.087595][T17550] EXT4-fs (loop0): dirty_blocks=32
[  181.092710][T17550] EXT4-fs (loop0): Block reservation details
[  181.098740][T17550] EXT4-fs (loop0): i_reserved_data_blocks=2
[  181.122297][T17550] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  181.153606][T17564] loop9: detected capacity change from 0 to 256
[  181.165598][T17564] Invalid ELF header magic: != ELF
[  181.320991][T17585] loop0: detected capacity change from 0 to 512
[  181.339469][T17585] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.5135: corrupted in-inode xattr: invalid ea_ino
[  181.353189][T17585] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.5135: couldn't read orphan inode 15 (err -117)
[  181.365595][T17585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.415890][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.540568][T17605] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22
[  181.600942][T17601] lo speed is unknown, defaulting to 1000
[  181.824748][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  182.434976][T17666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5166'.
[  182.444001][T17666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5166'.
[  182.452974][T17666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5166'.
[  182.462302][T17666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5166'.
[  182.584919][T17684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5177'.
[  182.642910][T17688] Invalid ELF header magic: != ELF
[  182.956121][ T8499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  183.048144][T17718] wireguard0: entered promiscuous mode
[  183.053672][T17718] wireguard0: entered allmulticast mode
[  183.472494][T17730] lo speed is unknown, defaulting to 1000
[  183.561588][T17749] Invalid ELF header magic: != ELF
[  183.973946][T17783] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  183.981377][T17783] vhci_hcd: invalid port number 23
[  184.000492][T17785] netlink: 'syz.9.5221': attribute type 1 has an invalid length.
[  184.008316][T17785] netlink: 'syz.9.5221': attribute type 4 has an invalid length.
[  184.047812][T17789] loop9: detected capacity change from 0 to 2048
[  184.065234][T17789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.113653][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  184.200487][T17789] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  184.215650][T17789] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  184.228072][T17789] EXT4-fs (loop9): This should not happen!! Data will be lost
[  184.228072][T17789] 
[  184.237832][T17789] EXT4-fs (loop9): Total free blocks count 0
[  184.243964][T17789] EXT4-fs (loop9): Free/Dirty block details
[  184.249862][T17789] EXT4-fs (loop9): free_blocks=2415919104
[  184.255618][T17789] EXT4-fs (loop9): dirty_blocks=32
[  184.260726][T17789] EXT4-fs (loop9): Block reservation details
[  184.266811][T17789] EXT4-fs (loop9): i_reserved_data_blocks=2
[  184.273184][T17793] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  184.508528][   T29] kauditd_printk_skb: 104 callbacks suppressed
[  184.508538][   T29] audit: type=1400 audit(1738492305.612:6127): avc:  denied  { mounton } for  pid=17811 comm="syz.5.5231" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  184.512642][T17812] 9pnet_fd: Insufficient options for proto=fd
[  184.717205][   T29] audit: type=1400 audit(1738492305.822:6128): avc:  denied  { mount } for  pid=17830 comm="syz.9.5238" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  184.739529][   T29] audit: type=1400 audit(1738492305.822:6129): avc:  denied  { unmount } for  pid=17830 comm="syz.9.5238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  184.803518][   T29] audit: type=1400 audit(1738492305.882:6130): avc:  denied  { accept } for  pid=17808 comm="syz.1.5230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  184.940968][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.956375][T17840] lo speed is unknown, defaulting to 1000
[  184.963845][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.982909][   T29] audit: type=1326 audit(1738492306.082:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  185.006429][   T29] audit: type=1326 audit(1738492306.082:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  185.029936][   T29] audit: type=1326 audit(1738492306.082:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  185.053494][   T29] audit: type=1326 audit(1738492306.082:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  185.077229][   T29] audit: type=1326 audit(1738492306.082:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  185.100734][   T29] audit: type=1326 audit(1738492306.082:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa73083cda9 code=0x7ffc0000
[  185.225364][ T8523] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  185.372628][T17862] __nla_validate_parse: 2 callbacks suppressed
[  185.372645][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5250'.
[  185.481547][T17864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5252'.
[  185.607444][T17875] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5256'.
[  185.616526][T17875] netlink: 'syz.5.5256': attribute type 7 has an invalid length.
[  185.624313][T17875] netlink: 'syz.5.5256': attribute type 8 has an invalid length.
[  185.632021][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5256'.
[  185.643535][T17875] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5256'.
[  185.652517][T17875] netlink: 'syz.5.5256': attribute type 7 has an invalid length.
[  185.660253][T17875] netlink: 'syz.5.5256': attribute type 8 has an invalid length.
[  185.667996][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5256'.
[  185.695579][T17880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.704182][T17880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.890650][T17895] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  185.890650][T17895]    program syz.0.5264 not setting count and/or reply_len properly
[  186.107746][T17912] siw: device registration error -23
[  186.163254][T17915] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.169895][T17917] loop9: detected capacity change from 0 to 2048
[  186.180016][T17917] EXT4-fs: Ignoring removed mblk_io_submit option
[  186.195318][T17917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.208421][T17915] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.228996][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.255834][T17915] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.324954][T17915] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.343486][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  186.360199][T17938] loop9: detected capacity change from 0 to 512
[  186.369596][T17938] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.5284: corrupted in-inode xattr: invalid ea_ino
[  186.386254][T17938] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.5284: couldn't read orphan inode 15 (err -117)
[  186.398894][T17938] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.417092][T17938] SELinux:  Context : is not valid (left unmapped).
[  186.427762][T17915] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.439101][T17915] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.450660][T17915] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.451868][ T6544] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.462078][T17915] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.652949][T17959] lo speed is unknown, defaulting to 1000
[  186.845205][T17968] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  186.859468][T17968] vhci_hcd: invalid port number 23
[  186.866469][T17974] 9pnet_fd: Insufficient options for proto=fd
[  186.883151][T17974] loop9: detected capacity change from 0 to 1024
[  186.914861][T17978] loop0: detected capacity change from 0 to 512
[  186.921269][T17978] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.938103][T17959] netlink: 'syz.1.5301': attribute type 4 has an invalid length.
[  186.938556][T17974] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.958361][T17978] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  186.966299][T17978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002]
[  186.974398][T17978] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80)
[  186.983958][T17978] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features
[  187.010734][T17978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  187.050875][T17978] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80)
[  187.090057][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.232959][T18002] can0: slcan on ttyS3.
[  187.262958][ T8523] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  187.283929][T18002] can0 (unregistered): slcan off ttyS3.
[  187.299629][T18002] Falling back ldisc for ttyS3.
[  187.304820][ T8523] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  187.317338][ T8523] EXT4-fs (loop9): This should not happen!! Data will be lost
[  187.317338][ T8523] 
[  187.327088][ T8523] EXT4-fs (loop9): Total free blocks count 0
[  187.333067][ T8523] EXT4-fs (loop9): Free/Dirty block details
[  187.338986][ T8523] EXT4-fs (loop9): free_blocks=68451041280
[  187.344893][ T8523] EXT4-fs (loop9): dirty_blocks=11232
[  187.350258][ T8523] EXT4-fs (loop9): Block reservation details
[  187.356260][ T8523] EXT4-fs (loop9): i_reserved_data_blocks=702
[  187.374440][ T8523] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  187.474079][ T8499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  187.562557][    C0] ==================================================================
[  187.570665][    C0] BUG: KCSAN: data-race in can_send / can_send
[  187.576842][    C0] 
[  187.579161][    C0] read-write to 0xffff88810f9c8c90 of 8 bytes by interrupt on cpu 1:
[  187.587223][    C0]  can_send+0x5a2/0x6d0
[  187.591391][    C0]  bcm_can_tx+0x314/0x420
[  187.595742][    C0]  bcm_tx_timeout_handler+0xdb/0x260
[  187.601036][    C0]  __hrtimer_run_queues+0x20d/0x5e0
[  187.606249][    C0]  hrtimer_run_softirq+0xe4/0x2c0
[  187.611280][    C0]  handle_softirqs+0xbf/0x280
[  187.615962][    C0]  do_softirq+0x5e/0x90
[  187.620124][    C0]  __local_bh_enable_ip+0x6e/0x70
[  187.625157][    C0]  _raw_spin_unlock_bh+0x36/0x40
[  187.630106][    C0]  release_sock+0x117/0x150
[  187.634612][    C0]  sockopt_release_sock+0x42/0x50
[  187.639643][    C0]  do_ip_getsockopt+0xcb4/0x11a0
[  187.644590][    C0]  ip_getsockopt+0x5c/0x170
[  187.649095][    C0]  tcp_getsockopt+0xaa/0xe0
[  187.653607][    C0]  sock_common_getsockopt+0x5b/0x70
[  187.658842][    C0]  do_sock_getsockopt+0x1ca/0x260
[  187.663883][    C0]  __x64_sys_getsockopt+0x18c/0x200
[  187.669110][    C0]  x64_sys_call+0x1288/0x2dc0
[  187.673802][    C0]  do_syscall_64+0xc9/0x1c0
[  187.678312][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.684232][    C0] 
[  187.686568][    C0] read-write to 0xffff88810f9c8c90 of 8 bytes by interrupt on cpu 0:
[  187.694629][    C0]  can_send+0x5a2/0x6d0
[  187.698793][    C0]  bcm_can_tx+0x314/0x420
[  187.703133][    C0]  bcm_tx_timeout_handler+0xdb/0x260
[  187.708424][    C0]  __hrtimer_run_queues+0x20d/0x5e0
[  187.713630][    C0]  hrtimer_run_softirq+0xe4/0x2c0
[  187.718668][    C0]  handle_softirqs+0xbf/0x280
[  187.723345][    C0]  run_ksoftirqd+0x1c/0x30
[  187.727775][    C0]  smpboot_thread_fn+0x31c/0x4c0
[  187.732725][    C0]  kthread+0x4ae/0x520
[  187.736802][    C0]  ret_from_fork+0x4b/0x60
[  187.741313][    C0]  ret_from_fork_asm+0x1a/0x30
[  187.746082][    C0] 
[  187.748447][    C0] value changed: 0x0000000000000b6d -> 0x0000000000000b6e
[  187.755555][    C0] 
[  187.757873][    C0] Reported by Kernel Concurrency Sanitizer on:
[  187.764015][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0
[  187.774280][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  187.784358][    C0] ==================================================================
[  188.803496][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  189.923503][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  191.053500][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  192.163529][ T8522] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  193.283503][ T8451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  194.403507][ T8499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  195.523505][ T8499] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  196.643509][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  197.312355][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  197.312387][   T29] audit: type=1400 audit(1738492318.412:6207): avc:  denied  { read } for  pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  197.340604][   T29] audit: type=1400 audit(1738492318.412:6208): avc:  denied  { search } for  pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.362163][   T29] audit: type=1400 audit(1738492318.432:6209): avc:  denied  { append } for  pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  197.384774][   T29] audit: type=1400 audit(1738492318.432:6210): avc:  denied  { open } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  197.407565][   T29] audit: type=1400 audit(1738492318.432:6211): avc:  denied  { getattr } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1