last executing test programs:

11m3.538701822s ago: executing program 32 (id=2933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

11m2.047246609s ago: executing program 33 (id=3010):
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

10m58.636701065s ago: executing program 34 (id=3098):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)

10m40.780809086s ago: executing program 35 (id=4152):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = syz_io_uring_setup(0x3b85, &(0x7f00000001c0)={0x0, 0xad84, 0x1, 0x22, 0x339}, &(0x7f0000000180), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f0000001540), 0x1}, 0x20)

9m47.682221171s ago: executing program 36 (id=6812):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

8m18.823708452s ago: executing program 37 (id=10516):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

8m18.03209084s ago: executing program 38 (id=10546):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)

7m54.162162484s ago: executing program 39 (id=10994):
ptrace(0x10, 0x1)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0)

7m43.152715969s ago: executing program 40 (id=11527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc)

7m8.701905346s ago: executing program 41 (id=12861):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/189, 0xbd}], 0x1, &(0x7f0000000a00)=""/71, 0x47}}], 0x1, 0x40012000, 0x0)

5m45.881214072s ago: executing program 42 (id=16862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

5m45.836483726s ago: executing program 43 (id=16865):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xae8}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800)

5m33.762457257s ago: executing program 44 (id=17362):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x503, 0x70bd27, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x1d961}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044891}, 0x4080)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

4m30.590619624s ago: executing program 45 (id=20295):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c31477", 0x2d}], 0x1}, 0x20000044)

3m40.595353798s ago: executing program 46 (id=21974):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94)

3m28.318523395s ago: executing program 47 (id=23058):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

3m6.707631429s ago: executing program 48 (id=23946):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xb5, [@rand_addr=0x64010101, @private=0xa010101, @rand_addr=0x64010102, @rand_addr=0x64010100, @local, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff4a}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x62, 0x0, 0x7}, @cipso={0x86, 0x6, 0x2}]}}}], 0x100}}], 0x1, 0x1)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44)

2m9.270350534s ago: executing program 49 (id=25580):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7})

2m5.251382659s ago: executing program 8 (id=26212):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
wait4(r2, 0x0, 0x40000000, 0x0)

2m4.990837665s ago: executing program 8 (id=26219):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

2m4.960271638s ago: executing program 8 (id=26222):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFF2400bVb20XECoqoSoOCAOqbE3lsluNmTXpTaRcP8GkEDiBH8CByQOSD1xgBNHJA6AKAekAhEoRuph0MyO7Y29Jou93iXez0eazI83M9/3djPz3r5dzwtgYl2KiK2ImI2INyNiodyelFO82p3y/R4+uL+8/eD+chJZ9sbfkyI93xY9x+TOluecj4ivfinim8nBuO2NzdtLjUb9Xrle7TTvVtsbm1fXmkur9dX6nVrtxuKNay9df7E2tLJebP7s/S+uvfa1X/7i4+/9duvz382zda5M6y3HMHWLPrMbJzcdEa+dRLAxmCrns2POB0eTRsSHIuJTxfW/EFPF/04A4DTLsoXIFnrXAYDTLi36wJK0EhFpWjYCKt0+vGfjTNpotTtXbrXW76x0+8rOx0x6a61Rv3Zh7vffLnaeSfL1xSKtSC/Wa/vWr0fEhYj4wdxTxXpludVYGU+TBwAm3tne+j8i/jWXppXKQIf2+VYPAHhizI87AwDAyKn/AWDyqP8BYPIMUP+XX/ZvnXheAIDR8PkfACaP+h8AJo/6HwAmyldefz2fsu3y+dcrb22s3269dXWl3r5daa4vV5Zb9+5WVlut1eKZPc3Hna/Rat1dfCHW36526u1Otb2xebPZWr/TuVk81/tmfWYkpQIA/psLF9/9XRIRWy8/VUzRM5aDuhpOt3SIewFPlqnjHKyBAE80o33B5BqoCi8aCb8+8bwA49H3Yd7zfRcf9aP/IYjfGcH/lcsfHbz/3xjPcLrs69n/IBtXRoCRO1r//ytDzwcwekfu///jcPMBjF6WJfvH/J/dTQIATqVj/IQv+96wGiHAWD1uMO+hfP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp8y5iPhWJGmlGAs8zf9NK5WIpyPifMwkt9Ya9WsR8UxcjIiZuXx9cdyZBgCOKf1rUo7/dXnh+XP7U2eTf88V84j4zo/f+OHbS53OvcV8+z92t8/tDB9W2zvuGOMKAgCD+/MgOxX1d62c93yQf/jg/vLOdIJ5POD9L+wOPrq8/eB+MXVTpiPLsixivmhLnPlnEtPlMfMR8VxETA0h/tY7EfGRfuVPir6R8+XIp73xo4z99Ejjp4/ET4u07jx/+T48hLzApHk3v/+82u/6S+NSMe9//c8Xd6jjK+5/8xE7977tnvjTZaSpPvHza/7SoDFe+NWXD2zMFrpp70Q8N90vfrIbPzkk/vMDxv/Dxz7x/VcOSct+EnE5+sfvjVXtNO9W2xubV9eaS6v11fqdWu3G4o1rL11/sVYt+qirOz3VB/3t5SvPHJa3vPxnDonffefP7iv/7O6xnxmw/D/94M1vfHJvdW5//M99uv/7/2wRsf/rn9eJnx0w/tKZnx86fHcef+WQ8j/u/b8yYPz3/rK5MuCuAMAItDc2by81GvV7x1rIP4UO4zwHFvIsDrbzTnPxeEH/FMXC3suSRBJHPuFM/6S8MTbQ4Sf1qp74wvRuW3G4Z/56fsYRFycdeimOshDny4WHowo6vnsSMBp7F31E/GbcuQEAAAAAAAAAAAAAAPoZxd8wjbuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF7/CQAA///bV8Ru")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x84)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
openat$ppp(0xffffffffffffff9c, 0x0, 0x214801, 0x0)

2m4.674683586s ago: executing program 8 (id=26234):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)

2m4.498707673s ago: executing program 8 (id=26238):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
io_setup(0x4, &(0x7f00000014c0)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}])
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m4.412575412s ago: executing program 8 (id=26242):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfac}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x8000f)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)

2m3.830315789s ago: executing program 4 (id=26254):
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

2m3.752727896s ago: executing program 4 (id=26259):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r3})

2m3.707145511s ago: executing program 4 (id=26261):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10)
bind$inet(r0, &(0x7f0000001300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
pread64(r2, &(0x7f0000000180)=""/109, 0x6d, 0x100)

2m3.681146764s ago: executing program 4 (id=26262):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)

2m3.649449786s ago: executing program 4 (id=26263):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
io_setup(0x4, &(0x7f00000014c0)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}])
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m3.563197955s ago: executing program 4 (id=26264):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040))

1m54.160094689s ago: executing program 7 (id=26457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m53.94824323s ago: executing program 7 (id=26460):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

1m53.898000975s ago: executing program 7 (id=26462):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1m53.769840518s ago: executing program 7 (id=26464):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
faccessat(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x0)

1m53.688108406s ago: executing program 7 (id=26467):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

1m53.633036351s ago: executing program 7 (id=26470):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x82, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m49.253688071s ago: executing program 50 (id=26242):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfac}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x8000f)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)

1m48.257924059s ago: executing program 51 (id=26264):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040))

1m38.521605006s ago: executing program 52 (id=26470):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x82, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m27.627293267s ago: executing program 0 (id=27074):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)

1m27.59913165s ago: executing program 0 (id=27076):
unshare(0x62060280)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

1m27.350166105s ago: executing program 0 (id=27079):
r0 = syz_io_uring_setup(0x6f52, &(0x7f0000000240)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f00000004c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0xc}, 0x18)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000})
io_uring_enter(r0, 0x1c39, 0x106a, 0x22, 0x0, 0x0)

1m27.330023757s ago: executing program 0 (id=27080):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0)

1m27.302753269s ago: executing program 0 (id=27081):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="1eb381f6c93a6e3ff91523d9814fe193281e9e3c21c162ec72c8ae719fef8daf6da31443c7738d9e2998ec71759a265bfcaa6384c5e3d1"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000)

1m27.19240779s ago: executing program 0 (id=27084):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m27.19206231s ago: executing program 53 (id=27084):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m14.526992985s ago: executing program 9 (id=27593):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0)

1m14.417121726s ago: executing program 9 (id=27597):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2})

1m14.37166941s ago: executing program 9 (id=27598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40)

1m14.308986956s ago: executing program 9 (id=27599):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1c5008, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x500, 0x40)
r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x172)

1m14.303812467s ago: executing program 9 (id=27601):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
io_setup(0x7, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x7)

1m14.224167315s ago: executing program 9 (id=27605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

1m14.208646636s ago: executing program 54 (id=27605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

669.333984ms ago: executing program 3 (id=31093):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000340)=[{0x28, 0x47, 0x6, 0xfffef038}, {0x6, 0x27, 0x4, 0x200000}]}, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)

619.226189ms ago: executing program 3 (id=31098):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

567.146975ms ago: executing program 3 (id=31103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e122002000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850)

567.008225ms ago: executing program 1 (id=31104):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18)
socket(0x1, 0x80802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)

566.605754ms ago: executing program 1 (id=31107):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x228000, 0x1000, 0x0, 0x4}, 0x20)

502.044751ms ago: executing program 1 (id=31108):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x94}}, 0x0)

501.880361ms ago: executing program 3 (id=31109):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
write$sndseq(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0})

501.775351ms ago: executing program 1 (id=31110):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5)

501.702511ms ago: executing program 5 (id=31111):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000340)="ebde13617ba07bd7f0", 0x9}], 0x1}}], 0x1, 0x20000011)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0)

501.564861ms ago: executing program 3 (id=31112):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1)

476.212214ms ago: executing program 5 (id=31113):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)

430.067038ms ago: executing program 3 (id=31116):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x5, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000bc0], 0x11, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]}, 0x1a6)

429.920218ms ago: executing program 1 (id=31117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x82e9ce810ab34d4c, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
kexec_load(0x0, 0x0, 0x0, 0x0)

429.801348ms ago: executing program 5 (id=31118):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000001540)={0x731001, 0x0, 0x15}, 0x18)

418.555139ms ago: executing program 1 (id=31119):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0)

418.286399ms ago: executing program 5 (id=31120):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
unlink(&(0x7f0000000100)='./file0/file1\x00')
rmdir(&(0x7f0000000000)='./file0\x00')
mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x17)

356.311055ms ago: executing program 2 (id=31124):
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0xe, 0x0, 0x9, 0x0, 0x9, 0xba7, 0xffffffff}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)

344.907276ms ago: executing program 2 (id=31127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mq_unlink(0x0)

277.474993ms ago: executing program 2 (id=31129):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)

277.320193ms ago: executing program 2 (id=31130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

258.489815ms ago: executing program 2 (id=31132):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2)

164.824984ms ago: executing program 6 (id=31135):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)

164.613594ms ago: executing program 6 (id=31136):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}, 0x0)

164.523034ms ago: executing program 6 (id=31137):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9)

145.334586ms ago: executing program 6 (id=31138):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000))
rmdir(&(0x7f0000000100)='./file1\x00')
r0 = syz_open_dev$usbfs(0x0, 0x204, 0x20082)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000)

141.758196ms ago: executing program 2 (id=31139):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffffffffffffffd)

93.359331ms ago: executing program 6 (id=31140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, 0x0, 0x0}, 0x20)

78.281742ms ago: executing program 5 (id=31141):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)

26.401947ms ago: executing program 5 (id=31142):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xff, 0xffffffff, 0xfffffffd, 0x7, "ff00"})
r1 = syz_open_pts(r0, 0x20882)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0xffffef06, 0x6, 0xffffffff, 0xada1, 0x4, "660000000000fb0100", 0x41, 0x203})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xd)
readv(r1, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/175, 0xaf}], 0x1)

0s ago: executing program 6 (id=31143):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)

kernel console output (not intermixed with test programs):

0 port 6081 - 0
[  690.367708][ T4701] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  690.368481][ T5299] Bluetooth: hci0: command 0x1003 tx timeout
[  690.411019][ T2670] siw: device registration error -23
[  690.495015][ T2674] SELinux: failed to load policy
[  690.661875][ T2702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27671'.
[  690.675544][ T2704] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27672'.
[  690.686002][ T2704] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27672'.
[  690.761691][ T2710] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  690.844709][ T2717] xt_hashlimit: max too large, truncated to 1048576
[  690.857330][ T2717] Cannot find add_set index 0 as target
[  691.032246][ T2740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27689'.
[  691.057053][ T2740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27689'.
[  691.075525][ T2740] bond0: (slave bond_slave_0): Releasing backup interface
[  691.261864][ T2748] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  691.367223][ T2750] ip6_vti0 speed is unknown, defaulting to 1000
[  691.524339][ T2750] vcan0 speed is unknown, defaulting to 1000
[  691.636333][   T29] kauditd_printk_skb: 135 callbacks suppressed
[  691.636345][   T29] audit: type=1326 audit(2000000404.108:26665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.700654][ T2750] lo speed is unknown, defaulting to 1000
[  691.742025][   T29] audit: type=1326 audit(2000000404.208:26666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.766240][   T29] audit: type=1326 audit(2000000404.208:26667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.790346][   T29] audit: type=1326 audit(2000000404.208:26668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.814676][   T29] audit: type=1326 audit(2000000404.208:26669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.838881][   T29] audit: type=1326 audit(2000000404.208:26670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.863132][   T29] audit: type=1326 audit(2000000404.208:26671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.887284][   T29] audit: type=1326 audit(2000000404.208:26672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.911429][   T29] audit: type=1326 audit(2000000404.208:26673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  691.935592][   T29] audit: type=1326 audit(2000000404.208:26674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.27701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  692.179122][    C1] vcan0: j1939_tp_rxtimer: 0xffff888176ea0400: rx timeout, send abort
[  692.187500][    C1] vcan0: j1939_tp_rxtimer: 0xffff888176ea0000: rx timeout, send abort
[  692.195826][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888176ea0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  692.210320][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888176ea0000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  692.615823][ T2861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27728'.
[  692.689863][ T2879] block device autoloading is deprecated and will be removed.
[  692.791391][ T2897] netlink: 131740 bytes leftover after parsing attributes in process `syz.6.27737'.
[  692.801526][ T2897] netlink: zone id is out of range
[  692.806789][ T2897] netlink: zone id is out of range
[  692.825214][ T2903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27738'.
[  692.831153][ T2897] netlink: zone id is out of range
[  692.862149][ T2897] netlink: zone id is out of range
[  692.867651][ T2897] netlink: del zone limit has 8 unknown bytes
[  692.911006][ T2912] SELinux: failed to load policy
[  692.980307][ T2928] loop5: detected capacity change from 0 to 512
[  693.022074][ T2928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  693.054904][ T2928] ext4 filesystem being mounted at /2568/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  693.176481][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.239507][ T2983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27752'.
[  693.248477][ T2983] netlink: 348 bytes leftover after parsing attributes in process `syz.5.27752'.
[  693.257725][ T2983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27752'.
[  693.266751][ T2983] netlink: 348 bytes leftover after parsing attributes in process `syz.5.27752'.
[  693.277370][ T2983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27752'.
[  693.384319][ T3011] loop5: detected capacity change from 0 to 256
[  693.389128][ T3007] loop6: detected capacity change from 0 to 512
[  693.411266][ T3011] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  693.419443][ T3007] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  693.439557][ T3007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e11d, mo2=0002]
[  693.453395][ T3007] System zones: 1-12
[  693.457580][ T3007] EXT4-fs (loop6): orphan cleanup on readonly fs
[  693.467507][ T3011] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  693.487115][ T3007] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.27759: bg 0: block 361: padding at end of block bitmap is not set
[  693.515796][ T3007] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  693.532520][ T3007] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.27759: attempt to clear invalid blocks 33619980 len 1
[  693.575361][ T3007] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.27759: invalid indirect mapped block 1811939328 (level 0)
[  693.592406][ T3007] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.27759: invalid indirect mapped block 2 (level 2)
[  693.606348][ T3007] EXT4-fs (loop6): 1 truncate cleaned up
[  693.613077][ T3007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  693.678382][ T3007] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  693.717135][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  693.801416][ T3060] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  693.846547][ T3066] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  693.864124][ T3068] xt_hashlimit: max too large, truncated to 1048576
[  693.901184][ T3075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27783'.
[  694.088520][ T3089] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  694.641515][ T3122] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  694.641515][ T3122]    program syz.1.27801 not setting count and/or reply_len properly
[  695.335280][ T3222] netlink: 'syz.3.27843': attribute type 12 has an invalid length.
[  695.343332][ T3222] netlink: 'syz.3.27843': attribute type 29 has an invalid length.
[  695.468999][ T3233] rdma_op ffff888165165980 conn xmit_rdma 0000000000000000
[  695.508973][ T3237] loop6: detected capacity change from 0 to 512
[  695.651456][ T3237] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  695.688358][ T3237] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  695.759271][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  695.902159][ T3268] loop6: detected capacity change from 0 to 512
[  695.912080][ T3266] ip6_vti0 speed is unknown, defaulting to 1000
[  695.944877][ T3268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  695.971196][ T3268] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  696.006408][ T3266] vcan0 speed is unknown, defaulting to 1000
[  696.079077][ T3266] lo speed is unknown, defaulting to 1000
[  696.182809][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.514149][ T3319] rdma_op ffff88812ed0cd80 conn xmit_rdma 0000000000000000
[  696.590313][ T3327] loop3: detected capacity change from 0 to 512
[  696.597472][ T3327] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  696.608795][ T3327] EXT4-fs (loop3): 1 truncate cleaned up
[  696.616329][ T3327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  696.677261][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.750280][   T29] kauditd_printk_skb: 174 callbacks suppressed
[  696.750292][   T29] audit: type=1326 audit(2000000409.215:26849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.805294][   T29] audit: type=1326 audit(2000000409.255:26850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.829623][   T29] audit: type=1326 audit(2000000409.255:26851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.853960][   T29] audit: type=1326 audit(2000000409.255:26852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.878261][   T29] audit: type=1326 audit(2000000409.255:26853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.902576][   T29] audit: type=1326 audit(2000000409.255:26854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.927065][   T29] audit: type=1326 audit(2000000409.255:26855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.951312][   T29] audit: type=1326 audit(2000000409.255:26856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.975505][   T29] audit: type=1326 audit(2000000409.255:26857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  696.999599][   T29] audit: type=1326 audit(2000000409.255:26858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.5.27894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  697.301989][ T3360] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  697.468200][ T3368] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  697.817464][ T3379] ip6_vti0 speed is unknown, defaulting to 1000
[  697.857745][ T3384] loop3: detected capacity change from 0 to 2048
[  697.872783][ T3384] EXT4-fs: Ignoring removed bh option
[  697.889574][ T3384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  697.914186][ T3379] vcan0 speed is unknown, defaulting to 1000
[  697.948024][ T3384] EXT4-fs (loop3): Online resizing not supported with bigalloc
[  698.001488][ T3379] lo speed is unknown, defaulting to 1000
[  698.031578][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  698.076317][ T3401] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  698.086950][ T3401] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.114992][ T3403] ip6_vti0 speed is unknown, defaulting to 1000
[  698.146143][ T3401] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  698.156504][ T3401] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.172014][ T3415] SELinux:  policydb version 0 does not match my version range 15-35
[  698.173174][ T3411] netlink: 'syz.5.27918': attribute type 3 has an invalid length.
[  698.180285][ T3415] SELinux: failed to load policy
[  698.217251][ T3403] vcan0 speed is unknown, defaulting to 1000
[  698.247511][ T3401] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  698.258012][ T3401] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.285203][ T3379] __nla_validate_parse: 10 callbacks suppressed
[  698.285216][ T3379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27908'.
[  698.305087][ T3403] lo speed is unknown, defaulting to 1000
[  698.338298][ T3401] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  698.348681][ T3401] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.429250][T31457] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  698.437529][T31457] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  698.475576][T31457] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  698.483879][T31457] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  698.489861][ T3437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  698.499546][ T3437] IPv6: NLM_F_CREATE should be set when creating new route
[  698.506977][ T3437] IPv6: NLM_F_CREATE should be set when creating new route
[  698.509041][T31457] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  698.522432][T31457] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  698.536756][T31457] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  698.545006][T31457] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  698.555178][ T3437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  698.686595][ T3454] loop6: detected capacity change from 0 to 128
[  698.700044][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.700044][ T3454] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128
[  698.734004][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.734004][ T3454] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128
[  698.748041][ T3454] Buffer I/O error on dev loop6, logical block 79, lost async page write
[  698.759954][ T3463] loop5: detected capacity change from 0 to 512
[  698.776572][ T3463] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  698.782878][ T3472] syz.6.27934: attempt to access beyond end of device
[  698.782878][ T3472] loop6: rw=2049, sector=170, nr_sectors = 2 limit=128
[  698.799862][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.799862][ T3454] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128
[  698.799898][ T3454] Buffer I/O error on dev loop6, logical block 80, lost async page write
[  698.800165][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.800165][ T3454] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128
[  698.837639][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.837639][ T3454] loop6: rw=2049, sector=166, nr_sectors = 2 limit=128
[  698.842452][ T3463] EXT4-fs (loop5): 1 truncate cleaned up
[  698.851482][ T3454] Buffer I/O error on dev loop6, logical block 83, lost async page write
[  698.866229][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.866229][ T3454] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128
[  698.880113][ T3454] Buffer I/O error on dev loop6, logical block 84, lost async page write
[  698.889358][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.889358][ T3454] loop6: rw=2049, sector=202, nr_sectors = 6 limit=128
[  698.892387][ T3463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  698.903895][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.903895][ T3454] loop6: rw=2049, sector=206, nr_sectors = 2 limit=128
[  698.929204][ T3454] Buffer I/O error on dev loop6, logical block 103, lost async page write
[  698.949334][ T3454] syz.6.27934: attempt to access beyond end of device
[  698.949334][ T3454] loop6: rw=2049, sector=208, nr_sectors = 2 limit=128
[  698.963251][ T3454] Buffer I/O error on dev loop6, logical block 104, lost async page write
[  698.992024][ T3454] Buffer I/O error on dev loop6, logical block 107, lost async page write
[  699.000714][ T3454] Buffer I/O error on dev loop6, logical block 108, lost async page write
[  699.028715][ T3454] Buffer I/O error on dev loop6, logical block 119, lost async page write
[  699.042332][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  699.046478][ T3489] netlink: 'syz.3.27939': attribute type 3 has an invalid length.
[  699.055800][ T3454] Buffer I/O error on dev loop6, logical block 120, lost async page write
[  699.059565][ T3489] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.27939'.
[  699.390295][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27956'.
[  699.403828][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27958'.
[  699.521612][ T3575] netlink: 'syz.3.27960': attribute type 12 has an invalid length.
[  699.529635][ T3575] netlink: 'syz.3.27960': attribute type 29 has an invalid length.
[  699.537615][ T3575] netlink: 148 bytes leftover after parsing attributes in process `syz.3.27960'.
[  699.546835][ T3575] netlink: 'syz.3.27960': attribute type 1 has an invalid length.
[  699.554704][ T3575] netlink: 23 bytes leftover after parsing attributes in process `syz.3.27960'.
[  699.667251][ T3597] macvtap0: refused to change device tx_queue_len
[  699.699054][ T3603] ip6_vti0 speed is unknown, defaulting to 1000
[  699.706222][ T3602] binfmt_misc: register: failed to install interpreter file ./file0
[  699.795835][ T3603] vcan0 speed is unknown, defaulting to 1000
[  699.906635][ T3629] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  699.983989][ T3603] lo speed is unknown, defaulting to 1000
[  700.048656][ T3653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  700.055207][ T3653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  700.062740][ T3653] vhci_hcd vhci_hcd.0: Device attached
[  700.089055][ T3655] vhci_hcd: connection closed
[  700.089190][T31457] vhci_hcd: stop threads
[  700.098157][T31457] vhci_hcd: release socket
[  700.102634][T31457] vhci_hcd: disconnect device
[  700.261354][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27986'.
[  700.522298][ T3713] IPv6: Can't replace route, no match found
[  700.552283][ T3704] loop5: detected capacity change from 0 to 32768
[  700.603328][ T3704]  loop5: p1 p3 < >
[  700.615808][ T3721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.640187][ T3724] ip6_vti0 speed is unknown, defaulting to 1000
[  700.667438][ T3721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.684717][ T3726] SELinux:  policydb version 0 does not match my version range 15-35
[  700.698164][ T3726] SELinux: failed to load policy
[  700.703321][ T3724] vcan0 speed is unknown, defaulting to 1000
[  700.746092][ T3721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.773514][ T3724] lo speed is unknown, defaulting to 1000
[  700.808174][ T3721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.899139][T31457] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.924832][T31457] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.944236][T31457] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  700.963535][T31457] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  701.071202][ T3770] loop9: detected capacity change from 0 to 7
[  701.078580][ T3770]  loop9: unable to read partition table
[  701.084482][ T3770] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ���
[  701.084482][ T3770] 
) failed (rc=-5)
[  701.170975][ T3783] atomic_op ffff8881a4dc2128 conn xmit_atomic 0000000000000000
[  701.192137][ T3788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3788 comm=syz.1.28023
[  701.205080][ T3788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3788 comm=syz.1.28023
[  701.282880][ T3793] ALSA: seq fatal error: cannot create timer (-19)
[  701.868001][ T3868] netlink: 24 bytes leftover after parsing attributes in process `syz.6.28037'.
[  701.897517][ T3861] sit0: left promiscuous mode
[  701.980127][ T3861] .`: left promiscuous mode
[  702.037308][ T3861] 0�X���: left allmulticast mode
[  702.291821][ T3861] batadv_slave_0: left promiscuous mode
[  702.641022][ T3861] bond0: left allmulticast mode
[  702.839481][ T3865] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.849676][ T3865] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.877044][ T3868] IPVS: Error connecting to the multicast addr
[  702.883505][T31448] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  702.891906][T31448] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  702.914823][T31448] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  702.923346][T31448] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  702.932555][T31448] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  702.941003][T31448] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.106666][ T3967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3967 comm=syz.3.28050
[  703.119320][ T3967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3967 comm=syz.3.28050
[  703.212523][   T29] kauditd_printk_skb: 106 callbacks suppressed
[  703.212537][   T29] audit: type=1326 audit(2000000415.682:26965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.243471][   T29] audit: type=1326 audit(2000000415.682:26966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.267967][   T29] audit: type=1326 audit(2000000415.682:26967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.292327][   T29] audit: type=1326 audit(2000000415.682:26968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.316594][   T29] audit: type=1326 audit(2000000415.682:26969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.340578][   T29] audit: type=1326 audit(2000000415.692:26970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.364500][   T29] audit: type=1326 audit(2000000415.692:26971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.388508][   T29] audit: type=1326 audit(2000000415.692:26972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.412445][   T29] audit: type=1326 audit(2000000415.702:26973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.436459][   T29] audit: type=1326 audit(2000000415.702:26974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.28057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  703.596613][ T4002] netlink: 'syz.2.28066': attribute type 21 has an invalid length.
[  703.852727][ T4019] ip6_vti0 speed is unknown, defaulting to 1000
[  703.897272][ T4019] vcan0 speed is unknown, defaulting to 1000
[  704.007071][ T4019] lo speed is unknown, defaulting to 1000
[  704.068450][ T4033] block device autoloading is deprecated and will be removed.
[  704.145090][ T4039] ip6_vti0 speed is unknown, defaulting to 1000
[  704.222639][ T4039] vcan0 speed is unknown, defaulting to 1000
[  704.300338][ T4039] lo speed is unknown, defaulting to 1000
[  704.637376][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28112'.
[  704.778280][ T4120] vhci_hcd: default hub control req: 0314 v001b i0006 l0
[  704.836236][ T4133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28126'.
[  704.845771][ T4133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28126'.
[  705.197893][ T4181] netlink: 'syz.2.28150': attribute type 16 has an invalid length.
[  705.206097][ T4181] netlink: 156 bytes leftover after parsing attributes in process `syz.2.28150'.
[  705.247324][ T4187] netlink: 268 bytes leftover after parsing attributes in process `syz.2.28151'.
[  705.290305][ T4185] loop5: detected capacity change from 0 to 1024
[  705.303951][ T4185] EXT4-fs: Ignoring removed orlov option
[  705.314331][ T4193] program syz.2.28155 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  705.351165][ T4185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  705.453303][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  705.586362][ T4227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28170'.
[  705.595757][ T4227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28170'.
[  705.737159][ T4249] netlink: 72 bytes leftover after parsing attributes in process `syz.3.28179'.
[  705.754262][ T4249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28179'.
[  705.766067][ T4249] veth0_macvtap: left promiscuous mode
[  705.803474][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28183'.
[  705.826881][ T4255] bond1: option ad_user_port_key: invalid value (1136)
[  705.834041][ T4255] bond1: option ad_user_port_key: allowed values 0 - 1023
[  705.874169][ T4255] bond1 (unregistering): Released all slaves
[  705.899278][ T4262] loop5: detected capacity change from 0 to 2048
[  705.917148][ T4262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  706.282714][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.437322][ T4304] loop3: detected capacity change from 0 to 8192
[  706.554907][ T4317] loop6: detected capacity change from 0 to 1024
[  706.561959][ T4317] EXT4-fs: Ignoring removed orlov option
[  706.580125][ T4317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  706.594251][ T4312] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  706.601937][ T4312] FAT-fs (loop3): Filesystem has been set read-only
[  706.634706][ T4304] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  706.652705][ T4304] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  706.679275][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.009907][ T4377] hub 6-0:1.0: USB hub found
[  707.014799][ T4377] hub 6-0:1.0: 8 ports detected
[  707.086496][ T4395] pim6reg: entered allmulticast mode
[  707.095958][ T4395] pim6reg: left allmulticast mode
[  707.227276][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0
[  707.252125][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1
[  707.262831][ T4405] bridge0: port 3(batadv0) entered disabled state
[  707.445347][ T4431] SELinux:  policydb version 0 does not match my version range 15-35
[  707.466944][ T4436] x_tables: duplicate underflow at hook 4
[  707.475017][ T4431] SELinux: failed to load policy
[  707.533184][ T4438] loop2: detected capacity change from 0 to 8192
[  707.551135][ T4445] loop5: detected capacity change from 0 to 1024
[  707.588661][ T4445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  707.637647][ T4445] EXT4-fs error (device loop5): ext4_xattr_set_entry:1665: inode #15: comm syz.5.28276: corrupted xattr entries
[  707.667809][ T4445] EXT4-fs error (device loop5): ext4_xattr_block_set:2215: inode #15: comm syz.5.28276: bad block 113
[  707.697082][ T4456] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  707.719650][ T4454] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  707.727563][ T4454] FAT-fs (loop2): Filesystem has been set read-only
[  707.759326][ T4438] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  707.778135][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.784949][ T4438] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  707.800082][ T4438] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  707.966146][ T4471] netlink: '+}[@': attribute type 10 has an invalid length.
[  707.982031][ T4471] veth1_vlan: left promiscuous mode
[  707.989406][ T4471] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  708.234040][   T29] kauditd_printk_skb: 255 callbacks suppressed
[  708.234055][   T29] audit: type=1400 audit(2000000420.700:27230): avc:  denied  { ioctl } for  pid=4502 comm="syz.6.28291" path="socket:[219846]" dev="sockfs" ino=219846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  708.272799][   T29] audit: type=1400 audit(2000000420.740:27231): avc:  denied  { bind } for  pid=4502 comm="syz.6.28291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  708.371598][   T29] audit: type=1400 audit(2000000420.820:27232): avc:  denied  { relabelfrom } for  pid=4508 comm="syz.3.28295" name="" dev="pipefs" ino=219860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  708.371711][   T29] audit: type=1400 audit(2000000420.840:27233): avc:  denied  { mount } for  pid=4510 comm="syz.3.28296" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  708.371735][   T29] audit: type=1400 audit(2000000420.840:27234): avc:  denied  { search } for  pid=4510 comm="syz.3.28296" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  708.371758][   T29] audit: type=1400 audit(2000000420.840:27235): avc:  denied  { search } for  pid=4510 comm="syz.3.28296" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  708.371781][   T29] audit: type=1400 audit(2000000420.840:27236): avc:  denied  { read open } for  pid=4510 comm="syz.3.28296" path="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  708.773871][   T29] audit: type=1400 audit(2000000421.239:27237): avc:  denied  { read } for  pid=4530 comm="syz.2.28301" dev="nsfs" ino=4026546729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  708.795642][   T29] audit: type=1400 audit(2000000421.239:27238): avc:  denied  { open } for  pid=4530 comm="syz.2.28301" path="net:[4026546729]" dev="nsfs" ino=4026546729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  708.827424][   T29] audit: type=1400 audit(2000000421.289:27239): avc:  denied  { create } for  pid=4530 comm="syz.2.28301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  709.118833][ T4552] loop3: detected capacity change from 0 to 512
[  709.125781][ T4552] EXT4-fs: Ignoring removed oldalloc option
[  709.132436][ T4552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  709.188415][ T4552] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.28307: invalid indirect mapped block 4294967295 (level 0)
[  709.220732][ T4552] EXT4-fs (loop3): Remounting filesystem read-only
[  709.270288][ T4552] EXT4-fs (loop3): 1 orphan inode deleted
[  709.276140][ T4552] EXT4-fs (loop3): 1 truncate cleaned up
[  709.282306][ T4552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  709.383593][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.714914][ T4602] loop3: detected capacity change from 0 to 128
[  709.727135][ T4602] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  709.758387][ T4607] __nla_validate_parse: 11 callbacks suppressed
[  709.758402][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.28330'.
[  709.761719][ T4602] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  709.774081][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  709.792017][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_0
[  709.826538][ T4602] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  709.849121][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  709.856541][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.875247][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28331'.
[  709.960728][ T4615] SELinux:  policydb version 0 does not match my version range 15-35
[  709.970807][ T4615] SELinux: failed to load policy
[  710.046501][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28338'.
[  710.266719][ T4651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.28352'.
[  710.344918][ T4657] vhci_hcd: invalid port number 96
[  710.350234][ T4657] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  710.351215][ T4663] loop3: detected capacity change from 0 to 128
[  710.378443][ T4663] bio_check_eod: 27 callbacks suppressed
[  710.378459][ T4663] syz.3.28359: attempt to access beyond end of device
[  710.378459][ T4663] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128
[  710.411025][ T4663] syz.3.28359: attempt to access beyond end of device
[  710.411025][ T4663] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128
[  710.428613][ T4667] loop6: detected capacity change from 0 to 512
[  710.445547][ T4663] syz.3.28359: attempt to access beyond end of device
[  710.445547][ T4663] loop3: rw=2049, sector=152, nr_sectors = 2 limit=128
[  710.458358][ T4665] ip6_vti0 speed is unknown, defaulting to 1000
[  710.459138][ T4663] buffer_io_error: 16 callbacks suppressed
[  710.459149][ T4663] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  710.486484][ T4667] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  710.489135][ T4663] syz.3.28359: attempt to access beyond end of device
[  710.489135][ T4663] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128
[  710.496469][ T4667] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  710.510129][ T4663] syz.3.28359: attempt to access beyond end of device
[  710.510129][ T4663] loop3: rw=2049, sector=176, nr_sectors = 2 limit=128
[  710.533248][ T4663] Buffer I/O error on dev loop3, logical block 88, lost async page write
[  710.533913][ T4665] vcan0 speed is unknown, defaulting to 1000
[  710.545044][ T4668] syz.3.28359: attempt to access beyond end of device
[  710.545044][ T4668] loop3: rw=2049, sector=186, nr_sectors = 64 limit=128
[  710.562036][ T4668] syz.3.28359: attempt to access beyond end of device
[  710.562036][ T4668] loop3: rw=2049, sector=154, nr_sectors = 16 limit=128
[  710.576451][ T4663] syz.3.28359: attempt to access beyond end of device
[  710.576451][ T4663] loop3: rw=2049, sector=178, nr_sectors = 8 limit=128
[  710.591164][ T4663] syz.3.28359: attempt to access beyond end of device
[  710.591164][ T4663] loop3: rw=2049, sector=184, nr_sectors = 2 limit=128
[  710.604727][ T4663] Buffer I/O error on dev loop3, logical block 92, lost async page write
[  710.615326][ T4665] lo speed is unknown, defaulting to 1000
[  710.645468][ T4667] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.28360: Invalid inode table block 1 in block_group 0
[  710.664232][ T4667] EXT4-fs (loop6): Remounting filesystem read-only
[  710.671115][ T4667] EXT4-fs (loop6): get root inode failed
[  710.676868][ T4667] EXT4-fs (loop6): mount failed
[  710.763175][ T4689] netlink: 44 bytes leftover after parsing attributes in process `syz.5.28367'.
[  710.833306][ T4692] SELinux: failed to load policy
[  710.857725][ T4701] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  710.898886][ T4707] loop2: detected capacity change from 0 to 512
[  710.905836][ T4707] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  710.915650][ T4707] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  710.926079][ T4707] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.28375: Invalid inode table block 1 in block_group 0
[  710.950186][ T4707] EXT4-fs (loop2): Remounting filesystem read-only
[  710.960240][ T4707] EXT4-fs (loop2): get root inode failed
[  710.965888][ T4707] EXT4-fs (loop2): mount failed
[  711.095233][ T4725] SELinux: failed to load policy
[  711.204596][ T4740] netlink: 28 bytes leftover after parsing attributes in process `syz.6.28391'.
[  711.214995][ T4738] loop2: detected capacity change from 0 to 512
[  711.235915][ T4745] loop3: detected capacity change from 0 to 512
[  711.236961][ T4738] EXT4-fs: Ignoring removed orlov option
[  711.245607][ T4745] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  711.257867][ T4745] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  711.268143][ T4738] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  711.279858][ T4745] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.28393: Invalid inode table block 1 in block_group 0
[  711.294975][ T4747] netlink: 24 bytes leftover after parsing attributes in process `syz.6.28395'.
[  711.322387][ T4738] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.28390: corrupted in-inode xattr: e_value size too large
[  711.343618][ T4745] EXT4-fs (loop3): Remounting filesystem read-only
[  711.369606][ T4745] EXT4-fs (loop3): get root inode failed
[  711.375547][ T4745] EXT4-fs (loop3): mount failed
[  711.380996][ T4738] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.28390: couldn't read orphan inode 15 (err -117)
[  711.398800][ T4738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  711.452590][ T4755] loop6: detected capacity change from 0 to 512
[  711.466744][ T4759] loop5: detected capacity change from 0 to 2048
[  711.490169][ T4761] ip6_vti0 speed is unknown, defaulting to 1000
[  711.499646][  T349] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.509408][ T4755] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  711.525083][ T4755] EXT4-fs (loop6): orphan cleanup on readonly fs
[  711.567126][ T4761] vcan0 speed is unknown, defaulting to 1000
[  711.569638][ T4755] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.28397: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  711.595588][ T4759]  loop5: p2 p3 p7
[  711.636563][ T4755] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.28397: couldn't read orphan inode 13 (err -117)
[  711.657126][ T4761] lo speed is unknown, defaulting to 1000
[  711.668515][ T4755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  711.728772][ T4755] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  711.747399][ T4782] netlink: 'syz.5.28409': attribute type 3 has an invalid length.
[  711.755841][ T4755] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  711.777732][ T4755] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  711.794665][ T4785] loop5: detected capacity change from 0 to 512
[  711.806369][ T4755] ext4 filesystem being remounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  711.837119][ T4785] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.28410: error while reading EA inode 32 err=-116
[  711.850128][ T4788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.28411'.
[  711.856586][ T4785] EXT4-fs (loop5): Remounting filesystem read-only
[  711.866128][ T4788] IPVS: Error connecting to the multicast addr
[  711.885146][ T4785] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  711.895491][ T4785] EXT4-fs (loop5): 1 orphan inode deleted
[  711.896706][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.901851][ T4785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  711.923779][ T4785] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.948655][ T4793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28414'.
[  711.957775][ T4793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28414'.
[  711.992683][ T4799] loop3: detected capacity change from 0 to 1024
[  712.005010][ T4799] EXT4-fs: inline encryption not supported
[  712.031397][ T4799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  712.072753][ T4810] pimreg: entered allmulticast mode
[  712.121752][ T4810] pimreg: left allmulticast mode
[  712.125368][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.316922][ T4826] ip6_vti0 speed is unknown, defaulting to 1000
[  712.332218][ T4831] loop5: detected capacity change from 0 to 512
[  712.338310][ T4831] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  712.338347][ T4831] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  712.369609][ T4831] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.28424: Invalid inode table block 1 in block_group 0
[  712.381441][ T4831] EXT4-fs (loop5): Remounting filesystem read-only
[  712.381478][ T4831] EXT4-fs (loop5): get root inode failed
[  712.381490][ T4831] EXT4-fs (loop5): mount failed
[  712.415733][ T4826] vcan0 speed is unknown, defaulting to 1000
[  712.553483][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.553512][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.553537][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.553566][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.553587][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.553627][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.553652][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x4
[  712.553674][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.553695][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.553720][T23777] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  712.554409][T23777] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  712.581085][ T4826] lo speed is unknown, defaulting to 1000
[  712.840866][ T4892] loop6: detected capacity change from 0 to 512
[  712.848366][ T4892] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  712.892727][ T4892] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  712.916480][ T4892] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.28445: Invalid inode table block 1 in block_group 0
[  712.920376][ T4892] EXT4-fs (loop6): Remounting filesystem read-only
[  712.920412][ T4892] EXT4-fs (loop6): get root inode failed
[  712.920533][ T4892] EXT4-fs (loop6): mount failed
[  713.138896][   T23] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  713.252642][ T4936] loop6: detected capacity change from 0 to 1024
[  713.314050][ T4936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  713.412803][ T4952] netlink: 'syz.3.28454': attribute type 1 has an invalid length.
[  713.417918][   T29] kauditd_printk_skb: 126 callbacks suppressed
[  713.417932][   T29] audit: type=1326 audit(2000003003.883:27366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.454403][   T29] audit: type=1326 audit(2000003003.883:27367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.509566][   T29] audit: type=1326 audit(2000003003.923:27368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.509595][   T29] audit: type=1326 audit(2000003003.923:27369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.509616][   T29] audit: type=1326 audit(2000003003.923:27370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.509671][   T29] audit: type=1326 audit(2000003003.923:27371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.509692][   T29] audit: type=1326 audit(2000003003.923:27372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.509714][   T29] audit: type=1326 audit(2000003003.923:27373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.509791][   T29] audit: type=1326 audit(2000003003.923:27374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  713.509858][   T29] audit: type=1326 audit(2000003003.923:27375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.1.28455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  714.028046][ T5012] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  714.080776][T23788] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  714.179653][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.471378][ T5080] loop3: detected capacity change from 0 to 2048
[  714.562478][ T5101] smc: net device bond0 applied user defined pnetid SYZ0
[  714.580551][ T5101] smc: net device bond0 erased user defined pnetid SYZ0
[  714.597215][ T5103] netlink: 'syz.1.28489': attribute type 6 has an invalid length.
[  714.812827][ T5132] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  715.172586][ T5148] __nla_validate_parse: 10 callbacks suppressed
[  715.172608][ T5148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28500'.
[  715.252833][ T5157] loop2: detected capacity change from 0 to 512
[  715.262915][ T5157] EXT4-fs: Ignoring removed mblk_io_submit option
[  715.271286][ T5157] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  715.280026][ T5157] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.28505: attempt to clear invalid blocks 2 len 1
[  715.293743][ T5157] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  715.309836][ T5157] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.28505: invalid indirect mapped block 1819239214 (level 0)
[  715.340162][ T5157] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.28505: invalid indirect mapped block 1819239214 (level 1)
[  715.357861][ T5157] EXT4-fs (loop2): 1 truncate cleaned up
[  715.364113][ T5157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  715.384095][ T5157] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work
[  715.406673][  T349] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.432108][ T5164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28508'.
[  715.489821][ T5170] loop6: detected capacity change from 0 to 512
[  715.534127][ T5170] EXT4-fs (loop6): too many log groups per flexible block group
[  715.545128][ T5170] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  715.552241][ T5170] EXT4-fs (loop6): mount failed
[  715.579015][ T5185] netlink: 'syz.3.28516': attribute type 3 has an invalid length.
[  715.581135][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28517'.
[  715.623322][ T5190] geneve2: entered promiscuous mode
[  715.624377][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28517'.
[  715.628880][ T5190] geneve2: entered allmulticast mode
[  715.767640][ T5208] loop6: detected capacity change from 0 to 512
[  715.787572][ T5208] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  715.796175][ T5208] EXT4-fs (loop6): orphan cleanup on readonly fs
[  715.803357][ T5208] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.28528: Failed to acquire dquot type 1
[  715.816248][T23282] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  715.816537][ T5210] ip6_vti0 speed is unknown, defaulting to 1000
[  715.835915][ T5208] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.28528: bg 0: block 40: padding at end of block bitmap is not set
[  715.862267][ T5208] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  715.878202][ T5208] EXT4-fs (loop6): 1 truncate cleaned up
[  715.887050][ T5208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  715.901058][ T5210] vcan0 speed is unknown, defaulting to 1000
[  715.972594][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.992384][ T5227] Cannot find add_set index 0 as target
[  716.006617][ T5229] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  716.014108][ T5210] lo speed is unknown, defaulting to 1000
[  716.014982][ T5229] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  716.138986][ T5248] pim6reg1: entered promiscuous mode
[  716.144311][ T5248] pim6reg1: entered allmulticast mode
[  716.194120][ T5255] loop2: detected capacity change from 0 to 512
[  716.208823][ T5255] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  716.218739][ T5255] EXT4-fs (loop2): orphan cleanup on readonly fs
[  716.225759][ T5255] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.28549: Failed to acquire dquot type 1
[  716.238237][ T5255] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.28549: bg 0: block 40: padding at end of block bitmap is not set
[  716.269786][ T5255] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  716.299513][ T5255] EXT4-fs (loop2): 1 truncate cleaned up
[  716.309404][ T5255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  716.328293][ T5260] netlink: 'syz.5.28551': attribute type 13 has an invalid length.
[  716.364385][  T349] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  716.379213][ T5260] gretap0: refused to change device tx_queue_len
[  716.379571][ T5264] vhci_hcd: invalid port number 0
[  716.399234][ T5260] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  716.423411][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28554'.
[  716.435299][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28555'.
[  716.472463][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28554'.
[  716.505460][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28554'.
[  716.515208][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28554'.
[  716.524401][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28554'.
[  716.547101][ T5279] bridge_slave_1: left allmulticast mode
[  716.552767][ T5279] bridge_slave_1: left promiscuous mode
[  716.558658][ T5279] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.569641][ T5279] bridge_slave_0: left promiscuous mode
[  716.575639][ T5279] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.673692][ T5296] netlink: 'syz.3.28568': attribute type 13 has an invalid length.
[  716.681136][ T5295] bond1: entered promiscuous mode
[  716.712475][ T5296] gretap0: refused to change device tx_queue_len
[  716.720033][ T5296] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  716.939576][ T5308] loop5: detected capacity change from 0 to 32768
[  716.956868][T31457] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  716.974255][T31457] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  716.983542][ T5308]  loop5: p1 p2 p3 < p5 p6 >
[  716.990179][ T5308] loop5: p2 size 16775168 extends beyond EOD, truncated
[  717.008405][T31457] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  717.025952][ T5308] loop5: p5 start 4294970168 is beyond EOD, truncated
[  717.033938][T31457] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  717.061220][ T5335] Cannot find del_set index 3 as target
[  717.244352][ T5355] loop9: detected capacity change from 0 to 7
[  717.252346][ T5357] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  717.264579][ T5355] Buffer I/O error on dev loop9, logical block 0, async page read
[  717.284277][ T5355] Buffer I/O error on dev loop9, logical block 0, async page read
[  717.292172][ T5355]  loop9: unable to read partition table
[  717.303215][ T5355] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ���
[  717.303215][ T5355] 
) failed (rc=-5)
[  717.455645][ T5384] netlink: 'syz.5.28608': attribute type 153 has an invalid length.
[  717.581905][ T5405] loop5: detected capacity change from 0 to 512
[  717.589967][ T5405] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  717.598438][ T5405] EXT4-fs (loop5): orphan cleanup on readonly fs
[  717.605197][ T5405] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.28618: Failed to acquire dquot type 1
[  717.617798][ T5405] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.28618: bg 0: block 40: padding at end of block bitmap is not set
[  717.632964][ T5405] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  717.642592][ T5405] EXT4-fs (loop5): 1 truncate cleaned up
[  717.648927][ T5405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  717.676908][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  717.742681][T10568] hid_parser_main: 109 callbacks suppressed
[  717.742706][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.756124][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.763516][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.770987][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.778450][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.785969][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.793426][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.800906][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.808326][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.815753][T10568] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  717.824118][T10568] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  717.888372][ T5416] loop5: detected capacity change from 0 to 512
[  717.925988][ T5416] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.28622: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  717.974250][ T5416] EXT4-fs error (device loop5): ext4_quota_enable:7139: comm syz.5.28622: Bad quota inode: 3, type: 0
[  717.999617][ T5416] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  718.014452][ T5416] EXT4-fs (loop5): mount failed
[  718.441832][ T5482] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  718.499626][   T29] kauditd_printk_skb: 448 callbacks suppressed
[  718.499639][   T29] audit: type=1326 audit(2000003008.964:27818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.549190][   T29] audit: type=1326 audit(2000003008.994:27819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.573551][   T29] audit: type=1326 audit(2000003008.994:27820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.597814][   T29] audit: type=1326 audit(2000003008.994:27821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.622067][   T29] audit: type=1326 audit(2000003008.994:27822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.646303][   T29] audit: type=1326 audit(2000003008.994:27823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.670543][   T29] audit: type=1326 audit(2000003008.994:27824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.694902][   T29] audit: type=1326 audit(2000003008.994:27825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.719097][   T29] audit: type=1326 audit(2000003008.994:27826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.743261][   T29] audit: type=1326 audit(2000003008.994:27827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.1.28657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb6455efc9 code=0x7ffc0000
[  718.955812][ T5518] Falling back ldisc for ttyS3.
[  719.261594][ T5565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5565 comm=syz.1.28686
[  719.288210][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88817ab6ae00: rx timeout, send abort
[  719.296858][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88817ab6ae00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  719.720567][ T5587] ip6_vti0 speed is unknown, defaulting to 1000
[  719.737110][ T5589] loop2: detected capacity change from 0 to 512
[  719.744212][ T5589] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  719.757738][ T5589] EXT4-fs (loop2): 1 truncate cleaned up
[  719.758668][ T5587] vcan0 speed is unknown, defaulting to 1000
[  719.763838][ T5589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  719.806148][  T349] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  719.843964][ T5587] lo speed is unknown, defaulting to 1000
[  719.987451][ T5612] loop5: detected capacity change from 0 to 512
[  720.011068][ T5612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  720.025955][ T5612] ext4 filesystem being mounted at /2747/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  720.053238][ T5617] netlink: 'syz.2.28707': attribute type 6 has an invalid length.
[  720.062433][ T5612] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #12: comm syz.5.28704: invalid size
[  720.089161][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  720.230656][ T5646] loop3: detected capacity change from 0 to 512
[  720.251487][ T5651] __nla_validate_parse: 26 callbacks suppressed
[  720.251504][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28721'.
[  720.267013][ T5651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.28721'.
[  720.276069][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28721'.
[  720.298559][ T5651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.28721'.
[  720.304140][ T5650] ALSA: seq fatal error: cannot create timer (-19)
[  720.307699][ T5651] netlink: 'syz.6.28721': attribute type 6 has an invalid length.
[  720.335455][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  720.348120][ T5646] ext4 filesystem being mounted at /213/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  720.368557][ T5646] EXT4-fs error (device loop3): ext4_empty_dir:3077: inode #12: comm syz.3.28722: invalid size
[  720.425339][ T5663] loop6: detected capacity change from 0 to 1024
[  720.439579][ T5667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5667 comm=syz.2.28728
[  720.455810][ T5663] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  720.473206][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  720.483921][ T5663] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #11: comm syz.6.28727: iget: bogus i_mode (1)
[  720.495775][ T5663] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.28727: couldn't read orphan inode 11 (err -117)
[  720.509187][ T5663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  720.528638][ T5663] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  720.687230][ T5692] loop2: detected capacity change from 0 to 1024
[  720.694381][ T5692] EXT4-fs: Ignoring removed orlov option
[  720.700445][ T5692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  720.725074][ T5688] SELinux: failed to load policy
[  720.742361][ T5692] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002]
[  720.754775][ T5692] System zones: 0-1, 3-12
[  720.759915][ T5692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  720.803184][  T349] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  720.856877][ T5712] ip6_vti0 speed is unknown, defaulting to 1000
[  720.868873][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28750'.
[  720.878020][ T5716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28750'.
[  720.887158][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28750'.
[  720.900787][ T5716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28750'.
[  720.909889][ T5716] netlink: 'syz.3.28750': attribute type 6 has an invalid length.
[  720.919347][ T5712] vcan0 speed is unknown, defaulting to 1000
[  721.037919][ T5712] lo speed is unknown, defaulting to 1000
[  721.293308][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28760'.
[  721.303150][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28760'.
[  721.404559][ T5796] loop3: detected capacity change from 0 to 512
[  721.415504][ T5796] EXT4-fs: Ignoring removed bh option
[  721.448516][ T5796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  721.478652][ T5796] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  721.554281][ T5813] loop5: detected capacity change from 0 to 1024
[  721.570744][ T5813] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  721.582127][ T5813] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  721.612029][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.640554][ T5813] JBD2: no valid journal superblock found
[  721.646619][ T5813] EXT4-fs (loop5): Could not load journal inode
[  721.817018][ T5886] ip6_vti0 speed is unknown, defaulting to 1000
[  721.873038][ T5886] vcan0 speed is unknown, defaulting to 1000
[  721.917565][ T5896] x_tables: duplicate entry at hook 1
[  721.944439][ T5886] lo speed is unknown, defaulting to 1000
[  722.026125][ T5909] ieee802154 phy1 wpan1: encryption failed: -22
[  722.265258][ T5948] netlink: 'syz.2.28798': attribute type 3 has an invalid length.
[  722.392340][ T5964] bridge0: entered promiscuous mode
[  722.404679][ T5964] macvlan2: entered promiscuous mode
[  722.418349][ T5964] bridge0: port 3(macvlan2) entered blocking state
[  722.425148][ T5964] bridge0: port 3(macvlan2) entered disabled state
[  722.446582][ T5964] macvlan2: entered allmulticast mode
[  722.452147][ T5964] bridge0: entered allmulticast mode
[  722.469631][ T5964] macvlan2: left allmulticast mode
[  722.474980][ T5964] bridge0: left allmulticast mode
[  722.496418][ T5964] bridge0: left promiscuous mode
[  722.644427][ T5974] loop3: detected capacity change from 0 to 128
[  723.113852][ T6032] SELinux:  policydb version 896 does not match my version range 15-35
[  723.132954][ T6032] SELinux: failed to load policy
[  723.347449][ T6049] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  723.355960][ T6049] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  723.392587][ T6052] loop3: detected capacity change from 0 to 1024
[  723.400551][ T6052] EXT4-fs: Ignoring removed nomblk_io_submit option
[  723.416458][ T6052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  723.427441][ T6052] System zones: 0-1, 3-36
[  723.435025][ T6052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  723.475155][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  723.506782][   T29] kauditd_printk_skb: 300 callbacks suppressed
[  723.506795][   T29] audit: type=1400 audit(2000005591.974:28128): avc:  denied  { create } for  pid=6065 comm="syz.6.28854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  723.541423][   T29] audit: type=1400 audit(2000005592.004:28129): avc:  denied  { create } for  pid=6069 comm="syz.5.28856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  723.565186][   T29] audit: type=1400 audit(2000005592.024:28130): avc:  denied  { ioctl } for  pid=6069 comm="syz.5.28856" path="socket:[224642]" dev="sockfs" ino=224642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  723.590928][   T29] audit: type=1400 audit(2000005592.024:28131): avc:  denied  { connect } for  pid=6069 comm="syz.5.28856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  723.611241][   T29] audit: type=1400 audit(2000005592.024:28132): avc:  denied  { write } for  pid=6069 comm="syz.5.28856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  723.636274][   T29] audit: type=1400 audit(2000005592.104:28133): avc:  denied  { getopt } for  pid=6075 comm="syz.5.28858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  723.656099][   T29] audit: type=1400 audit(2000005592.104:28134): avc:  denied  { name_connect } for  pid=6075 comm="syz.5.28858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  723.741682][   T29] audit: type=1400 audit(2000005592.204:28135): avc:  denied  { mount } for  pid=6086 comm="syz.3.28861" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  723.820376][   T29] audit: type=1400 audit(2000005592.284:28136): avc:  denied  { create } for  pid=6090 comm="syz.3.28863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  723.861597][   T29] audit: type=1400 audit(2000005592.314:28137): avc:  denied  { setopt } for  pid=6090 comm="syz.3.28863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  723.948455][ T6103] ip6_vti0 speed is unknown, defaulting to 1000
[  723.984520][ T6103] vcan0 speed is unknown, defaulting to 1000
[  724.045735][ T6103] lo speed is unknown, defaulting to 1000
[  724.328104][ T6118] loop3: detected capacity change from 0 to 512
[  724.345869][ T6118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  724.358566][ T6118] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  724.390029][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.412413][ T6127] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  724.420556][ T6127] SELinux: failed to load policy
[  724.672998][ T6168] loop5: detected capacity change from 0 to 1024
[  724.720604][ T6168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  724.743725][ T6168] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  724.764388][ T6168] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  724.777320][ T6168] EXT4-fs (loop5): This should not happen!! Data will be lost
[  724.777320][ T6168] 
[  724.787314][ T6168] EXT4-fs (loop5): Total free blocks count 0
[  724.793319][ T6168] EXT4-fs (loop5): Free/Dirty block details
[  724.799328][ T6168] EXT4-fs (loop5): free_blocks=68451041280
[  724.805153][ T6168] EXT4-fs (loop5): dirty_blocks=80
[  724.810290][ T6168] EXT4-fs (loop5): Block reservation details
[  724.816339][ T6168] EXT4-fs (loop5): i_reserved_data_blocks=5
[  724.856045][T31461] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  724.909808][ T6179] SELinux: failed to load policy
[  725.230514][ T6230] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 6230 comm: syz.6.28923)
[  725.302045][ T6240] loop3: detected capacity change from 0 to 1024
[  725.341250][ T6240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  725.374219][ T6240] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  725.390122][ T6240] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  725.402759][ T6240] EXT4-fs (loop3): This should not happen!! Data will be lost
[  725.402759][ T6240] 
[  725.412701][ T6240] EXT4-fs (loop3): Total free blocks count 0
[  725.419513][ T6240] EXT4-fs (loop3): Free/Dirty block details
[  725.425785][ T6240] EXT4-fs (loop3): free_blocks=68451041280
[  725.431861][ T6240] EXT4-fs (loop3): dirty_blocks=80
[  725.437212][ T6240] EXT4-fs (loop3): Block reservation details
[  725.443407][ T6240] EXT4-fs (loop3): i_reserved_data_blocks=5
[  725.453386][ T6248] macsec0: entered promiscuous mode
[  725.458659][ T6248] bridge0: entered promiscuous mode
[  725.498600][ T6248] bridge0: port 3(macsec0) entered blocking state
[  725.505105][ T6248] bridge0: port 3(macsec0) entered disabled state
[  725.511866][T31461] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  725.514706][ T6248] macsec0: entered allmulticast mode
[  725.529972][ T6248] bridge0: entered allmulticast mode
[  725.549965][ T6248] macsec0: left allmulticast mode
[  725.555072][ T6248] bridge0: left allmulticast mode
[  725.561382][ T6248] bridge0: left promiscuous mode
[  725.752750][ T6279] __nla_validate_parse: 12 callbacks suppressed
[  725.752766][ T6279] netlink: 36 bytes leftover after parsing attributes in process `syz.6.28945'.
[  725.841562][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28960'.
[  725.911968][ T6306] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  725.924227][ T6307] sctp: [Deprecated]: syz.3.28954 (pid 6307) Use of struct sctp_assoc_value in delayed_ack socket option.
[  725.924227][ T6307] Use struct sctp_sack_info instead
[  725.986158][T23282] hid_parser_main: 22 callbacks suppressed
[  725.986176][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  725.999908][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.007707][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.015522][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.023258][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.031024][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.038865][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.046709][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.054636][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.062370][T23282] hid-generic 0003:80000004:0000.0018: unknown main item tag 0x0
[  726.071086][T23282] hid-generic 0003:80000004:0000.0018: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  726.168334][ T6329] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2
[  726.203528][ T6335] loop6: detected capacity change from 0 to 1024
[  726.215969][ T6335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  726.232975][ T6335] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  726.248724][ T6335] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  726.261493][ T6335] EXT4-fs (loop6): This should not happen!! Data will be lost
[  726.261493][ T6335] 
[  726.271513][ T6335] EXT4-fs (loop6): Total free blocks count 0
[  726.277754][ T6335] EXT4-fs (loop6): Free/Dirty block details
[  726.283820][ T6335] EXT4-fs (loop6): free_blocks=68451041280
[  726.289885][ T6335] EXT4-fs (loop6): dirty_blocks=80
[  726.295180][ T6335] EXT4-fs (loop6): Block reservation details
[  726.301351][ T6335] EXT4-fs (loop6): i_reserved_data_blocks=5
[  726.330302][T31448] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  726.465821][ T6360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28981'.
[  726.569132][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28989'.
[  726.726071][ T6381] loop6: detected capacity change from 0 to 512
[  726.732962][ T6381] EXT4-fs: Ignoring removed mblk_io_submit option
[  726.741326][ T6381] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  726.759358][ T6381] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.28991: iget: bogus i_mode (2355)
[  726.771257][ T6381] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.28991: couldn't read orphan inode 15 (err -117)
[  726.784330][ T6381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  726.799246][ T6381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  726.908397][ T6396] netlink: 536 bytes leftover after parsing attributes in process `syz.6.28996'.
[  726.930871][ T6396] netlink: 60 bytes leftover after parsing attributes in process `syz.6.28996'.
[  727.188351][ T6417] SELinux:  policydb version 0 does not match my version range 15-35
[  727.221361][ T6417] SELinux: failed to load policy
[  727.547204][ T6437] loop3: detected capacity change from 0 to 512
[  727.556570][ T6437] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  727.629846][ T6441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29017'.
[  727.668673][ T6443] sd 0:0:1:0: device reset
[  727.831261][ T6460] netlink: 'syz.3.29025': attribute type 29 has an invalid length.
[  727.868500][ T6460] netlink: 'syz.3.29025': attribute type 29 has an invalid length.
[  728.219368][ T6493] macvtap0: entered promiscuous mode
[  728.229155][ T6493] macvtap0: left promiscuous mode
[  728.279945][ T6497] loop6: detected capacity change from 0 to 2048
[  728.293464][ T6499] 9pnet_fd: Insufficient options for proto=fd
[  728.301128][ T6497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  728.375785][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.400528][ T6512] loop6: detected capacity change from 0 to 512
[  728.408595][ T6512] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  728.429434][ T6512] tipc: Started in network mode
[  728.434551][ T6512] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  728.443994][ T6512] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  728.452218][ T6512] tipc: Enabled bearer <udp:syz0>, priority 10
[  728.520534][   T29] kauditd_printk_skb: 439 callbacks suppressed
[  728.520571][   T29] audit: type=1326 audit(2000005596.985:28577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.2.29021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cfdb85e67 code=0x7ffc0000
[  728.551430][   T29] audit: type=1326 audit(2000005597.025:28578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.2.29021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cfdb2b099 code=0x7ffc0000
[  728.575098][   T29] audit: type=1326 audit(2000005597.025:28579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.2.29021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cfdb85e67 code=0x7ffc0000
[  728.598817][   T29] audit: type=1326 audit(2000005597.025:28580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.2.29021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cfdb2b099 code=0x7ffc0000
[  728.622370][   T29] audit: type=1326 audit(2000005597.025:28581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.2.29021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  728.665729][   T29] audit: type=1326 audit(2000005597.135:28582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6525 comm="syz.2.29051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  728.706453][   T29] audit: type=1326 audit(2000005597.165:28583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6525 comm="syz.2.29051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  728.730130][   T29] audit: type=1326 audit(2000005597.165:28584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6525 comm="syz.2.29051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  728.753721][   T29] audit: type=1326 audit(2000005597.165:28585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6525 comm="syz.2.29051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  728.777643][   T29] audit: type=1326 audit(2000005597.165:28586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6525 comm="syz.2.29051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f9cfdb8efc9 code=0x7ffc0000
[  729.103863][ T6562] 9pnet_fd: Insufficient options for proto=fd
[  729.192032][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.6.29072'.
[  729.326582][ T6600] ip6_vti0 speed is unknown, defaulting to 1000
[  729.371292][ T6600] vcan0 speed is unknown, defaulting to 1000
[  729.440120][ T6600] lo speed is unknown, defaulting to 1000
[  729.473549][ T1049] tipc: Node number set to 1
[  729.618293][ T6635] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  729.676109][ T6645] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  729.847721][ T6676] sd 0:0:1:0: device reset
[  729.969446][ T6687] netlink: 'syz.6.29122': attribute type 21 has an invalid length.
[  730.609913][ T6746] loop3: detected capacity change from 0 to 2048
[  730.657090][ T6746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  730.759487][ T2520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  730.817874][ T6754] netlink: 64 bytes leftover after parsing attributes in process `syz.3.29151'.
[  730.850662][ T6756] ip6_vti0 speed is unknown, defaulting to 1000
[  730.891713][ T6756] vcan0 speed is unknown, defaulting to 1000
[  731.021154][ T6756] lo speed is unknown, defaulting to 1000
[  731.123194][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29162'.
[  731.450820][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29177'.
[  731.460181][ T6820] ip6_vti0 speed is unknown, defaulting to 1000
[  731.501496][ T6820] vcan0 speed is unknown, defaulting to 1000
[  731.559598][ T6820] lo speed is unknown, defaulting to 1000
[  732.272587][ T6852] loop2: detected capacity change from 0 to 1024
[  732.288943][ T6852] EXT4-fs: Ignoring removed orlov option
[  732.314469][ T6859] loop6: detected capacity change from 0 to 128
[  732.323342][ T6852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  732.337062][ T6852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  732.615890][ T6908] netlink: 'syz.5.29219': attribute type 10 has an invalid length.
[  732.643370][ T6908] team0: Port device dummy0 added
[  732.709230][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.29230'.
[  732.733735][ T6926] xfrm1: entered promiscuous mode
[  732.738930][ T6926] xfrm1: entered allmulticast mode
[  732.744496][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.29230'.
[  732.857178][ T6950] xt_hashlimit: max too large, truncated to 1048576
[  732.885344][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  732.909505][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.970361][ T6958] loop5: detected capacity change from 0 to 8192
[  733.205327][ T6983] loop5: detected capacity change from 0 to 128
[  733.215298][ T6983] GPL: attempt to access beyond end of device
[  733.215298][ T6983] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128
[  733.352965][ T6983] GPL: attempt to access beyond end of device
[  733.352965][ T6983] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128
[  733.473020][ T6983] GPL: attempt to access beyond end of device
[  733.473020][ T6983] loop5: rw=2049, sector=150, nr_sectors = 2 limit=128
[  733.485869][ T6983] Buffer I/O error on dev loop5, logical block 75, lost async page write
[  733.503443][ T6983] GPL: attempt to access beyond end of device
[  733.503443][ T6983] loop5: rw=2049, sector=152, nr_sectors = 2 limit=128
[  733.516809][ T6983] Buffer I/O error on dev loop5, logical block 76, lost async page write
[  733.564882][ T6983] GPL: attempt to access beyond end of device
[  733.564882][ T6983] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128
[  733.589665][ T6983] GPL: attempt to access beyond end of device
[  733.589665][ T6983] loop5: rw=2049, sector=174, nr_sectors = 2 limit=128
[  733.602930][ T6983] Buffer I/O error on dev loop5, logical block 87, lost async page write
[  733.626049][ T6983] GPL: attempt to access beyond end of device
[  733.626049][ T6983] loop5: rw=2049, sector=176, nr_sectors = 2 limit=128
[  733.639220][ T6983] Buffer I/O error on dev loop5, logical block 88, lost async page write
[  733.649533][ T6983] GPL: attempt to access beyond end of device
[  733.649533][ T6983] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128
[  733.665581][ T6983] GPL: attempt to access beyond end of device
[  733.665581][ T6983] loop5: rw=2049, sector=182, nr_sectors = 2 limit=128
[  733.678768][ T6983] Buffer I/O error on dev loop5, logical block 91, lost async page write
[  733.724730][ T7001] ip6_vti0 speed is unknown, defaulting to 1000
[  733.753106][ T6983] GPL: attempt to access beyond end of device
[  733.753106][ T6983] loop5: rw=2049, sector=184, nr_sectors = 2 limit=128
[  733.765962][ T6983] Buffer I/O error on dev loop5, logical block 92, lost async page write
[  733.777303][ T6983] Buffer I/O error on dev loop5, logical block 103, lost async page write
[  733.782596][   T29] kauditd_printk_skb: 185 callbacks suppressed
[  733.782610][   T29] audit: type=1400 audit(2000005602.246:28772): avc:  denied  { getopt } for  pid=7002 comm="syz.6.29263" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  733.801651][ T7001] vcan0 speed is unknown, defaulting to 1000
[  733.856615][ T7009] loop6: detected capacity change from 0 to 2048
[  733.864590][ T6983] Buffer I/O error on dev loop5, logical block 104, lost async page write
[  733.875237][ T7001] lo speed is unknown, defaulting to 1000
[  733.881496][ T6983] Buffer I/O error on dev loop5, logical block 107, lost async page write
[  733.892827][ T6983] Buffer I/O error on dev loop5, logical block 108, lost async page write
[  733.893005][ T7009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  734.082683][ T1295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.100448][   T29] audit: type=1326 audit(2000005602.566:28773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.5.29275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  734.127825][ T7032] netlink: 'syz.6.29274': attribute type 10 has an invalid length.
[  734.137056][ T7032] team0: Device dummy0 is up. Set it down before adding it as a team port
[  734.156089][   T29] audit: type=1326 audit(2000005602.596:28774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.5.29275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  734.180600][   T29] audit: type=1326 audit(2000005602.596:28775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.5.29275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  734.204648][   T29] audit: type=1326 audit(2000005602.616:28776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.5.29275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95627efc9 code=0x7ffc0000
[  734.229340][   T29] audit: type=1400 audit(2000005602.646:28777): avc:  denied  { write } for  pid=7034 comm="syz.2.29277" name="mcfilter6" dev="proc" ino=4026547832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  734.270411][ T7038] netlink: '': attribute type 3 has an invalid length.
[  734.295551][ T7046] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  734.305216][ T7044] loop5: detected capacity change from 0 to 512
[  734.313811][ T7044] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  734.327515][ T7048] loop2: detected capacity change from 0 to 512
[  734.336099][ T7044] EXT4-fs (loop5): 1 truncate cleaned up
[  734.343445][ T7044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  734.356800][ T7048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  734.375078][ T7048] ext4 filesystem being mounted at /479/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  734.395651][ T7048] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.29283: corrupted inode contents
[  734.412817][ T7048] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.29283: mark_inode_dirty error
[  734.423764][ T7059] netlink: 35 bytes leftover after parsing attributes in process `syz.3.29286'.
[  734.425327][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.29284'.
[  734.433445][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29286'.
[  734.442335][ T7060] netlink: 'syz.6.29284': attribute type 18 has an invalid length.
[  734.447029][ T7048] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.29283: corrupted inode contents
[  734.472257][ T7048] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.29283: mark_inode_dirty error
[  734.488228][ T7048] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #18: comm syz.2.29283: directory missing '.'
[  734.499778][ T7063] loop5: detected capacity change from 0 to 128
[  734.506602][   T29] audit: type=1400 audit(2000005602.956:28778): avc:  denied  { create } for  pid=7047 comm="syz.2.29283" name="$" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  734.527075][   T29] audit: type=1400 audit(2000005602.956:28779): avc:  denied  { remove_name } for  pid=7047 comm="syz.2.29283" name="$" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  734.550197][   T29] audit: type=1400 audit(2000005602.956:28780): avc:  denied  { rmdir } for  pid=7047 comm="syz.2.29283" name="$" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  734.593747][ T7067] netlink: 80 bytes leftover after parsing attributes in process `+}[@'.
[  734.609248][ T7069] netlink: 'syz.2.29290': attribute type 10 has an invalid length.
[  734.621112][ T7069] team0: Port device dummy0 added
[  734.668619][   T29] audit: type=1400 audit(2000005603.136:28781): avc:  denied  { setopt } for  pid=7076 comm="syz.2.29293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  734.732986][ T7081] loop2: detected capacity change from 0 to 128
[  735.108575][ T7111] netlink: 'syz.1.29309': attribute type 3 has an invalid length.
[  735.116804][ T7111] netlink: 'syz.1.29309': attribute type 3 has an invalid length.
[  735.146113][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29310'.
[  735.315875][ T7145] bridge0: port 4(batadv1) entered blocking state
[  735.322521][ T7145] bridge0: port 4(batadv1) entered disabled state
[  735.330024][ T7145] batadv1: entered allmulticast mode
[  735.335986][ T7145] batadv1: entered promiscuous mode
[  735.482583][ T7160] Falling back ldisc for ttyS3.
[  735.834165][T31450] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  735.843420][T31450] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  736.212255][ T7273] Falling back ldisc for ttyS3.
[  736.611341][ T7323] netlink: 'syz.6.29410': attribute type 21 has an invalid length.
[  736.620390][ T7323] __nla_validate_parse: 5 callbacks suppressed
[  736.620405][ T7323] netlink: 132 bytes leftover after parsing attributes in process `syz.6.29410'.
[  736.635781][ T7323] netlink: 20 bytes leftover after parsing attributes in process `syz.6.29410'.
[  737.060180][ T7383] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  737.132238][  T281] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  737.141822][  T281] ref_tracker: netdev@ffff8881191f3558 has 1/1 users at
[  737.141822][  T281]      batadv_hard_if_event+0x6c1/0xf10
[  737.141822][  T281]      raw_notifier_call_chain+0x6f/0x1b0
[  737.141822][  T281]      call_netdevice_notifiers_info+0xae/0x100
[  737.141822][  T281]      register_netdevice+0xd48/0xf00
[  737.141822][  T281]      veth_newlink+0x49b/0x770
[  737.141822][  T281]      rtnl_newlink_create+0x1bc/0x620
[  737.141822][  T281]      rtnl_newlink+0xf29/0x12d0
[  737.141822][  T281]      rtnetlink_rcv_msg+0x5fe/0x6d0
[  737.141822][  T281]      netlink_rcv_skb+0x123/0x220
[  737.141822][  T281]      rtnetlink_rcv+0x1c/0x30
[  737.141822][  T281]      netlink_unicast+0x5c0/0x690
[  737.141822][  T281]      netlink_sendmsg+0x58b/0x6b0
[  737.141822][  T281]      __sock_sendmsg+0x145/0x180
[  737.141822][  T281]      __sys_sendto+0x268/0x330
[  737.141822][  T281]      __x64_sys_sendto+0x76/0x90
[  737.141822][  T281]      x64_sys_call+0x2d14/0x3000
[  737.141822][  T281] 
[  737.569863][ T7467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=7467 comm=syz.5.29481
[  737.693336][ T7480] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  737.784392][ T7493] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  737.816611][ T7498] ip6gre1: entered allmulticast mode
[  738.222824][ T7538] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  738.229361][ T7538] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  738.237069][ T7538] vhci_hcd vhci_hcd.0: Device attached
[  738.272637][ T7541] vhci_hcd: connection closed
[  738.272792][T31461] vhci_hcd: stop threads
[  738.281779][T31461] vhci_hcd: release socket
[  738.286193][T31461] vhci_hcd: disconnect device
[  738.312400][ T7544] netlink: 'syz.2.29525': attribute type 4 has an invalid length.
[  738.335646][ T7544] netlink: 'syz.2.29525': attribute type 4 has an invalid length.
[  738.492387][ T7569] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  738.759742][ T7598] Q�6��\b��Y�4��: renamed from lo (while UP)
[  738.782633][   T29] kauditd_printk_skb: 852 callbacks suppressed
[  738.782646][   T29] audit: type=1400 audit(2000005607.256:29634): avc:  denied  { create } for  pid=7599 comm="syz.6.29541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0
[  738.808738][   T29] audit: type=1400 audit(2000005607.256:29635): avc:  denied  { map_create } for  pid=7599 comm="syz.6.29541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  738.828200][   T29] audit: type=1400 audit(2000005607.256:29636): avc:  denied  { prog_load } for  pid=7599 comm="syz.6.29541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  738.847499][   T29] audit: type=1400 audit(2000005607.256:29637): avc:  denied  { read write } for  pid=1295 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  738.877714][   T29] audit: type=1400 audit(2000005607.306:29638): avc:  denied  { read write } for  pid=2520 comm="syz-executor" name="loop3" dev="devtmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  738.901171][   T29] audit: type=1400 audit(2000005607.326:29639): avc:  denied  { prog_load } for  pid=7602 comm="syz.3.29543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  738.920500][   T29] audit: type=1400 audit(2000005607.326:29640): avc:  denied  { map_create } for  pid=7601 comm="syz.6.29542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  738.939868][   T29] audit: type=1400 audit(2000005607.326:29641): avc:  denied  { prog_load } for  pid=7601 comm="syz.6.29542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  738.959214][   T29] audit: type=1400 audit(2000005607.326:29642): avc:  denied  { create } for  pid=7601 comm="syz.6.29542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0
[  738.978829][   T29] audit: type=1400 audit(2000005607.326:29643): avc:  denied  { read write } for  pid=1295 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  739.073713][ T7620] IPv6: NLM_F_CREATE should be specified when creating new route
[  739.142903][ T7636] netlink: 'syz.3.29558': attribute type 29 has an invalid length.
[  739.151387][ T7636] netlink: 'syz.3.29558': attribute type 29 has an invalid length.
[  739.250301][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.29568'.
[  739.394136][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29584'.
[  739.469980][ T7701] ip6_vti0 speed is unknown, defaulting to 1000
[  739.510277][ T7701] vcan0 speed is unknown, defaulting to 1000
[  739.590326][ T7701] lo speed is unknown, defaulting to 1000
[  739.862706][ T7775] xt_hashlimit: max too large, truncated to 1048576
[  740.277324][ T7830] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  740.991549][ T7950] netlink: 'syz.3.29706': attribute type 15 has an invalid length.
[  740.999493][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29706'.
[  741.030597][ T7956] ip6t_srh: unknown srh match flags  4000
[  741.046442][T31461] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  741.048637][ T7950] netlink: 'syz.3.29706': attribute type 15 has an invalid length.
[  741.057287][T31461] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  741.062763][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29706'.
[  741.091492][T31461] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  741.100184][T31461] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  741.191678][ T5299] Bluetooth: hci0: sending frame failed (-49)
[  741.207141][ T4701] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  741.266259][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29720'.
[  741.595921][ T8036] netlink: 'syz.5.29746': attribute type 10 has an invalid length.
[  741.740498][ T8066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  742.130186][ T8110] netlink: 64 bytes leftover after parsing attributes in process `syz.1.29779'.
[  742.691878][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29821'.
[  742.742811][ T8203] netlink: 'syz.1.29825': attribute type 5 has an invalid length.
[  743.192095][ T8239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8239 comm=syz.2.29844
[  743.279450][ T8246] ip6_vti0 speed is unknown, defaulting to 1000
[  743.318779][ T8246] vcan0 speed is unknown, defaulting to 1000
[  743.400253][ T8246] lo speed is unknown, defaulting to 1000
[  743.741067][ T8294] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  743.741186][ T8296] netlink: 'syz.3.29867': attribute type 19 has an invalid length.
[  743.758520][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29867'.
[  743.780522][ T8296] netlink: 'syz.3.29867': attribute type 19 has an invalid length.
[  743.788504][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29867'.
[  743.797559][   T29] kauditd_printk_skb: 1176 callbacks suppressed
[  743.797573][   T29] audit: type=1400 audit(2000005612.267:30820): avc:  denied  { module_request } for  pid=8303 comm="syz.1.29872" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  743.826428][   T29] audit: type=1400 audit(2000005612.267:30821): avc:  denied  { sys_module } for  pid=8303 comm="syz.1.29872" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[  743.855010][   T29] audit: type=1400 audit(2000005612.277:30822): avc:  denied  { prog_load } for  pid=8305 comm="syz.1.29873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  743.874305][   T29] audit: type=1400 audit(2000005612.277:30823): avc:  denied  { create } for  pid=8305 comm="syz.1.29873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0
[  743.894138][   T29] audit: type=1400 audit(2000005612.307:30824): avc:  denied  { create } for  pid=8307 comm="syz.1.29874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  743.914065][   T29] audit: type=1400 audit(2000005612.307:30825): avc:  denied  { prog_load } for  pid=8307 comm="syz.1.29874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  743.933309][   T29] audit: type=1400 audit(2000005612.307:30826): avc:  denied  { prog_load } for  pid=8301 comm="syz.5.29871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  743.952568][   T29] audit: type=1400 audit(2000005612.307:30827): avc:  denied  { read } for  pid=8301 comm="syz.5.29871" dev="nsfs" ino=4026539535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  743.974203][   T29] audit: type=1400 audit(2000005612.327:30828): avc:  denied  { map_create } for  pid=8301 comm="syz.5.29871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  744.005491][   T29] audit: type=1400 audit(2000005612.347:30829): avc:  denied  { map_create } for  pid=8311 comm="syz.1.29875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  744.925033][ T8435] macvtap0: refused to change device tx_queue_len
[  745.039936][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29946'.
[  745.057328][ T8462] bond_slave_1: entered promiscuous mode
[  745.071236][ T8462] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  745.081940][ T8462] bond_slave_1: left promiscuous mode
[  745.304174][ T8504] veth2: entered promiscuous mode
[  745.309263][ T8504] veth2: entered allmulticast mode
[  745.548803][ T8525] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  745.722816][ T8564] pim6reg1: entered promiscuous mode
[  745.728292][ T8564] pim6reg1: entered allmulticast mode
[  745.868681][ T8595] vlan2: entered promiscuous mode
[  745.873837][ T8595] macvlan1: entered promiscuous mode
[  745.985283][ T8620] team0: Port device dummy0 removed
[  746.007517][ T8620] bridge_slave_0: left promiscuous mode
[  746.013307][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.022485][ T8620] bridge_slave_1: left allmulticast mode
[  746.028213][ T8620] bridge_slave_1: left promiscuous mode
[  746.034139][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.055879][ T8620] bond0: (slave bond_slave_0): Releasing backup interface
[  746.112203][ T8620] bond0: (slave bond_slave_1): Releasing backup interface
[  746.163097][ T8620] team0: Port device team_slave_0 removed
[  746.179165][ T8620] team0: Port device team_slave_1 removed
[  746.199118][ T8620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  746.366797][ T8684] can0: slcan on ttyS3.
[  746.400510][ T8684] can0 (unregistered): slcan off ttyS3.
[  746.406249][ T8684] Falling back ldisc for ttyS3.
[  746.530716][ T8720] IPv6: NLM_F_CREATE should be specified when creating new route
[  746.564045][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30071'.
[  746.573092][ T8723] netlink: 'syz.5.30071': attribute type 9 has an invalid length.
[  746.743911][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30083'.
[  746.870189][ T8765] netlink: 'syz.2.30092': attribute type 12 has an invalid length.
[  747.001078][T10568] IPVS: starting estimator thread 0...
[  747.007014][ T8775] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  747.100549][ T8782] IPVS: using max 2448 ests per chain, 122400 per kthread
[  747.241700][ T8811] netlink: 'syz.1.30112': attribute type 21 has an invalid length.
[  747.255438][ T8811] netlink: 156 bytes leftover after parsing attributes in process `syz.1.30112'.
[  747.265050][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30112'.
[  747.420108][ T8842] netlink: 'syz.5.30127': attribute type 1 has an invalid length.
[  747.436335][ T8842] bond2: entered promiscuous mode
[  747.443096][ T8842] 8021q: adding VLAN 0 to HW filter on device bond2
[  747.469712][ T8842] 8021q: adding VLAN 0 to HW filter on device bond3
[  747.479717][ T8842] bond2: (slave bond3): making interface the new active one
[  747.487274][ T8842] bond3: entered promiscuous mode
[  747.496041][ T8842] bond2: (slave bond3): Enslaving as an active interface with an up link
crond[3106]: time disparity of 86 minutes detected

[  747.874664][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30169'.
[  748.498759][ T9038] netlink: 'syz.3.30219': attribute type 4 has an invalid length.
[  748.510252][ T9038] netlink: 'syz.3.30219': attribute type 4 has an invalid length.
[  748.587125][ T9059] sch_fq: defrate 4294967295 ignored.
[  748.803046][   T29] kauditd_printk_skb: 1439 callbacks suppressed
[  748.803109][   T29] audit: type=1400 audit(2000005617.278:32269): avc:  denied  { prog_load } for  pid=9104 comm="syz.6.30249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  748.839244][   T29] audit: type=1400 audit(2000005617.278:32270): avc:  denied  { read write } for  pid=1295 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  748.843943][ T9109] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  748.863701][   T29] audit: type=1400 audit(2000005617.308:32271): avc:  denied  { read write } for  pid=349 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  748.863803][   T29] audit: type=1400 audit(2000005617.308:32272): avc:  denied  { prog_load } for  pid=9107 comm="syz.6.30250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  748.864615][   T29] audit: type=1400 audit(2000005617.308:32273): avc:  denied  { prog_load } for  pid=9110 comm="syz.2.30251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  748.933600][   T29] audit: type=1400 audit(2000005617.338:32274): avc:  denied  { prog_load } for  pid=9107 comm="syz.6.30250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  748.953243][   T29] audit: type=1400 audit(2000005617.408:32275): avc:  denied  { read write } for  pid=349 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  748.976712][   T29] audit: type=1400 audit(2000005617.428:32276): avc:  denied  { map_create } for  pid=9112 comm="syz.2.30252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  748.996179][   T29] audit: type=1400 audit(2000005617.428:32277): avc:  denied  { prog_load } for  pid=9112 comm="syz.2.30252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  749.015444][   T29] audit: type=1400 audit(2000005617.428:32278): avc:  denied  { prog_load } for  pid=9112 comm="syz.2.30252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  749.051969][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.30255'.
[  749.220911][ T9151] netlink: 96 bytes leftover after parsing attributes in process `syz.6.30271'.
[  749.354006][ T9192] netlink: 96 bytes leftover after parsing attributes in process `syz.6.30285'.
[  749.421019][ T9206] binfmt_misc: register: failed to install interpreter file ./file0
[  749.659223][ T9235] netlink: 96 bytes leftover after parsing attributes in process `syz.6.30305'.
[  749.887804][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.30315'.
[  749.962670][ T9267] netlink: 64 bytes leftover after parsing attributes in process `syz.6.30320'.
[  751.443953][ T9477] bond1: entered promiscuous mode
[  751.449152][ T9477] bond1: entered allmulticast mode
[  751.454688][ T9477] 8021q: adding VLAN 0 to HW filter on device bond1
[  751.467072][ T9477] bond1 (unregistering): Released all slaves
[  751.528815][ T9493] netlink: 'syz.6.30428': attribute type 19 has an invalid length.
[  751.536826][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.30428'.
[  751.546861][ T9493] netlink: 'syz.6.30428': attribute type 19 has an invalid length.
[  751.710377][ T9526] netlink: 'syz.5.30443': attribute type 10 has an invalid length.
[  751.741624][ T9526] team0 (unregistering): Port device dummy0 removed
[  752.377218][ T9628] __nla_validate_parse: 1 callbacks suppressed
[  752.377234][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30491'.
[  752.392824][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30491'.
[  752.678065][T31425] Bluetooth: hci0: Frame reassembly failed (-84)
[  752.922255][ T9714] netlink: 'syz.1.30533': attribute type 15 has an invalid length.
[  752.930410][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30533'.
[  752.939706][ T9714] netlink: 'syz.1.30533': attribute type 15 has an invalid length.
[  752.947779][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30533'.
[  753.040123][ T9726] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.30535'.
[  753.056114][ T9719] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.30535'.
[  753.819403][   T29] kauditd_printk_skb: 1283 callbacks suppressed
[  753.819503][   T29] audit: type=1400 audit(2000005622.299:33562): avc:  denied  { read write } for  pid=9809 comm="syz.3.30576" name="loop3" dev="devtmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0
[  753.854882][   T29] audit: type=1400 audit(2000005622.329:33563): avc:  denied  { read write } for  pid=6471 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  753.883567][   T29] audit: type=1400 audit(2000005622.359:33564): avc:  denied  { prog_load } for  pid=9845 comm="syz.1.30594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  753.912411][   T29] audit: type=1400 audit(2000005622.359:33565): avc:  denied  { prog_load } for  pid=9844 comm="syz.5.30595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  753.932333][   T29] audit: type=1400 audit(2000005622.359:33566): avc:  denied  { read } for  pid=9844 comm="syz.5.30595" dev="nsfs" ino=4026539535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  753.954267][   T29] audit: type=1400 audit(2000005622.359:33567): avc:  denied  { allowed } for  pid=9845 comm="syz.1.30594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  753.975814][   T29] audit: type=1400 audit(2000005622.429:33568): avc:  denied  { prog_load } for  pid=9848 comm="syz.1.30596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  753.995101][   T29] audit: type=1400 audit(2000005622.429:33569): avc:  denied  { open } for  pid=9848 comm="syz.1.30596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  754.014828][   T29] audit: type=1400 audit(2000005622.449:33570): avc:  denied  { create } for  pid=9850 comm="syz.1.30597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0
[  754.034461][   T29] audit: type=1400 audit(2000005622.449:33571): avc:  denied  { map_create } for  pid=9850 comm="syz.1.30597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  754.264454][ T9894] ip6_vti0 speed is unknown, defaulting to 1000
[  754.294484][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30620'.
[  754.301862][ T9894] vcan0 speed is unknown, defaulting to 1000
[  754.340461][ T9899] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  754.393373][ T9894] lo speed is unknown, defaulting to 1000
[  754.689073][ T5299] Bluetooth: hci0: command 0x1003 tx timeout
[  754.690228][ T4701] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  754.729515][ T9931] netlink: 'syz.5.30643': attribute type 1 has an invalid length.
[  754.753461][ T9931] 8021q: adding VLAN 0 to HW filter on device bond4
[  754.790070][ T9931] bond4: (slave geneve2): making interface the new active one
[  754.799578][ T9931] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  754.808230][T31461] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.826871][T31461] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.843500][T31461] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.852333][T31461] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.944226][ T9956] wireguard0: entered promiscuous mode
[  754.950103][ T9956] wireguard0: entered allmulticast mode
[  755.197661][T10018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10018 comm=syz.3.30676
[  755.290051][T10034] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  755.384008][T10052] netlink: 'syz.2.30693': attribute type 12 has an invalid length.
[  755.392146][T10052] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30693'.
[  755.546251][T10078] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  756.140249][T10142] netem: change failed
[  756.460615][T10184] netlink: 'syz.5.30754': attribute type 1 has an invalid length.
[  756.475243][T10184] 8021q: adding VLAN 0 to HW filter on device bond5
[  756.489520][T10184] 8021q: adding VLAN 0 to HW filter on device batadv1
[  756.498218][T10184] bond5: (slave batadv1): making interface the new active one
[  756.506839][T10184] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  757.228216][T10248] netlink: 96 bytes leftover after parsing attributes in process `syz.1.30780'.
[  757.294491][T10252] ip6_vti0 speed is unknown, defaulting to 1000
[  757.352202][T10252] vcan0 speed is unknown, defaulting to 1000
[  757.527366][T10252] lo speed is unknown, defaulting to 1000
[  757.896099][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.30815'.
[  757.944082][T10338] netlink: 64 bytes leftover after parsing attributes in process `syz.2.30819'.
[  758.497087][T10396] netlink: 'syz.5.30848': attribute type 21 has an invalid length.
[  758.505092][T10396] netlink: 168 bytes leftover after parsing attributes in process `syz.5.30848'.
[  758.682525][T10419] IPv6: NLM_F_CREATE should be specified when creating new route
[  758.784608][T10433] ip6_vti0 speed is unknown, defaulting to 1000
[  758.825001][T10433] vcan0 speed is unknown, defaulting to 1000
[  758.832261][   T29] kauditd_printk_skb: 933 callbacks suppressed
[  758.832273][   T29] audit: type=1400 audit(2000005627.310:34505): avc:  denied  { read write } for  pid=6471 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  758.902265][   T29] audit: type=1400 audit(2000005627.310:34506): avc:  denied  { map_create } for  pid=10444 comm="syz.5.30869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  758.921764][   T29] audit: type=1400 audit(2000005627.310:34507): avc:  denied  { prog_load } for  pid=10444 comm="syz.5.30869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  758.941329][   T29] audit: type=1400 audit(2000005627.310:34508): avc:  denied  { prog_load } for  pid=10444 comm="syz.5.30869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  758.960701][   T29] audit: type=1400 audit(2000005627.320:34509): avc:  denied  { read write } for  pid=6471 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  758.984995][   T29] audit: type=1400 audit(2000005627.320:34510): avc:  denied  { prog_load } for  pid=10446 comm="syz.5.30870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  759.004400][   T29] audit: type=1400 audit(2000005627.320:34511): avc:  denied  { module_request } for  pid=10446 comm="syz.5.30870" kmod="iptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  759.026241][   T29] audit: type=1400 audit(2000005627.350:34512): avc:  denied  { read write } for  pid=6471 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  759.050546][   T29] audit: type=1400 audit(2000005627.380:34513): avc:  denied  { read write } for  pid=1295 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  759.168324][   T29] audit: type=1400 audit(2000005627.380:34514): avc:  denied  { map_create } for  pid=10451 comm="syz.6.30872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  759.195466][T10433] lo speed is unknown, defaulting to 1000
[  759.505638][T10496] ip6_vti0 speed is unknown, defaulting to 1000
[  759.577073][T10496] vcan0 speed is unknown, defaulting to 1000
[  759.654145][T10496] lo speed is unknown, defaulting to 1000
[  760.174310][T10553] ip6_vti0 speed is unknown, defaulting to 1000
[  760.187838][T10560] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  760.200256][T10560] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  760.228163][T10560] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  760.247791][T10569] vlan0: entered promiscuous mode
[  760.252912][T10569] macvlan1: entered promiscuous mode
[  760.261395][T10553] vcan0 speed is unknown, defaulting to 1000
[  760.350665][T10553] lo speed is unknown, defaulting to 1000
[  760.458122][T10604] netlink: 'syz.3.30937': attribute type 10 has an invalid length.
[  760.485082][T10606] syzkaller0: entered promiscuous mode
[  760.490761][T10606] syzkaller0: entered allmulticast mode
[  760.506099][T10604] team0 (unregistering): Port device team_slave_0 removed
[  760.517847][T10604] team0 (unregistering): Port device team_slave_1 removed
[  760.642130][T10624] netlink: 'syz.2.30947': attribute type 4 has an invalid length.
[  761.129914][T10729] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  761.294782][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31014'.
[  761.328090][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31014'.
[  761.363089][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31014'.
[  761.393578][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31014'.
[  761.418320][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31014'.
[  761.712301][T10851] wg1: entered promiscuous mode
[  761.717244][T10851] wg1: entered allmulticast mode
[  761.902570][T10883] x_tables: unsorted entry at hook 1
[  761.921798][T10887] macvtap0: entered promiscuous mode
[  761.928497][T10887] macvtap0: left promiscuous mode
[  761.955015][T10894] netlink: 'syz.3.31077': attribute type 4 has an invalid length.
[  762.038075][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31086'.
[  762.206200][T10951] netlink: 'syz.3.31103': attribute type 10 has an invalid length.
[  762.229177][T10951] veth0_vlan: entered allmulticast mode
[  762.373534][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31125'.
[  762.507360][T11006] --map-set only usable from mangle table
[  762.546609][T11008] can0: slcan on ttyS3.
[  762.607778][T11008] can0 (unregistered): slcan off ttyS3.
[  762.613480][T11008] Falling back ldisc for ttyS3.
[  762.733322][T11028] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  762.821458][T11023] ==================================================================
[  762.829562][T11023] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  762.838155][T11023] 
[  762.840476][T11023] write to 0xffff8881621b9e28 of 8 bytes by task 11025 on cpu 0:
[  762.848188][T11023]  shmem_file_splice_read+0x470/0x600
[  762.853560][T11023]  splice_direct_to_actor+0x26f/0x680
[  762.858930][T11023]  do_splice_direct+0xda/0x150
[  762.863698][T11023]  do_sendfile+0x380/0x650
[  762.868125][T11023]  __x64_sys_sendfile64+0x105/0x150
[  762.873330][T11023]  x64_sys_call+0x2bb4/0x3000
[  762.877999][T11023]  do_syscall_64+0xd2/0x200
[  762.882514][T11023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.888405][T11023] 
[  762.890719][T11023] write to 0xffff8881621b9e28 of 8 bytes by task 11023 on cpu 1:
[  762.898432][T11023]  shmem_file_splice_read+0x470/0x600
[  762.903813][T11023]  splice_direct_to_actor+0x26f/0x680
[  762.909187][T11023]  do_splice_direct+0xda/0x150
[  762.913954][T11023]  do_sendfile+0x380/0x650
[  762.918399][T11023]  __x64_sys_sendfile64+0x105/0x150
[  762.923597][T11023]  x64_sys_call+0x2bb4/0x3000
[  762.928271][T11023]  do_syscall_64+0xd2/0x200
[  762.932765][T11023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.938657][T11023] 
[  762.940969][T11023] value changed: 0x0000000000027599 -> 0x00000000000275ee
[  762.948066][T11023] 
[  762.950394][T11023] Reported by Kernel Concurrency Sanitizer on:
[  762.956537][T11023] CPU: 1 UID: 0 PID: 11023 Comm: syz.2.31139 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  762.967996][T11023] Tainted: [W]=WARN
[  762.971791][T11023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  762.981837][T11023] ==================================================================