last executing test programs:

1m57.360364998s ago: executing program 3 (id=1462):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/41, 0x29}], 0x1)
read(r0, 0x0, 0x0)

1m57.304649974s ago: executing program 3 (id=1465):
socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28)
writev(r1, &(0x7f0000001780)=[{&(0x7f00000006c0)}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
unshare(0x42000000)

1m56.403687383s ago: executing program 3 (id=1483):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x0, 0xc806, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

1m56.288051184s ago: executing program 3 (id=1484):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x112496, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8764}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ifreq(r2, 0x8934, &(0x7f0000000040)={'tunl0\x00', @ifru_map={0x80, 0x6, 0x8000, 0x2, 0x8, 0x1}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
sendfile(r3, r3, 0x0, 0x7a680000)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0xb5178a1eee5eeece, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r4, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000240))
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa94f8d674031204efaa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
open(&(0x7f0000000080)='./file2\x00', 0x406001, 0x41)
recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8140)

1m55.485319114s ago: executing program 3 (id=1495):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0)

1m54.804246051s ago: executing program 3 (id=1500):
socket$tipc(0x1e, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20)

1m54.803589601s ago: executing program 32 (id=1500):
socket$tipc(0x1e, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20)

6.067040348s ago: executing program 4 (id=3119):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x8050)
epoll_create1(0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="401000002825000008001c00", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4)
shutdown(r3, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)

5.897127475s ago: executing program 4 (id=3122):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x0)

5.026324211s ago: executing program 0 (id=3130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r6, &(0x7f0000000100)=""/44, 0xbb)
syz_clone3(&(0x7f0000000640)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x22}, 0x0, 0x0, &(0x7f0000000300)=""/18, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x8, {r6}}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10)
mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0)
capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x80, 0xc11})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x40, 0x112)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)

5.014493152s ago: executing program 4 (id=3131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x202020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000041)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"], 0xfe33)

4.982825756s ago: executing program 4 (id=3134):
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x351a, 0x100, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0x10)
syz_io_uring_setup(0x70ca, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000007c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000050000001000"/27], 0x50)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000240))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)

4.166104256s ago: executing program 0 (id=3148):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x202020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000041)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"], 0xfe33)

4.121367301s ago: executing program 0 (id=3150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0e54040, &(0x7f0000000a00)={[{@noblock_validity}, {@lazytime}, {@lazytime}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nolazytime}, {@noload}], [{@fsmagic={'fsmagic', 0x3d, 0xa}}, {@euid_lt}, {@dont_hash}, {@euid_lt}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
utimes(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x1}}, 0x24, 0x3)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000680)={0x8, 0x9, 0x7, 0x6, 0x9})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0xc7}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
dup2(r4, r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240), &(0x7f0000000840)=ANY=[@ANYBLOB="00fb8d0504af16ff49c231aa336bd50bae337b1b6b17389aacbd961d3d68a2ce541200b202cd714d1b296134ce2b41576df390f8537b3712f131f497f07969c00fa05ca40fbe887e514a2d07051994b7fd63f29ded2e47e5bd5162d6020a8c65a63c57198e9ef6b234d189f0acc128098c8a982123163f510162ffcf8e313d476e424bef5751bdd16d21288dfd"], 0x8d, 0x3)

4.054457658s ago: executing program 0 (id=3151):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10, 0x0}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="49483ea3", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
read(r3, &(0x7f0000000200)=""/202, 0xca)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}})
tkill(r2, 0x7)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0x0)

3.12449293s ago: executing program 0 (id=3157):
socket$tipc(0x1e, 0x2, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12000000, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, 0x0, &(0x7f0000000580)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

2.308973961s ago: executing program 2 (id=3161):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]})
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x640, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0xb, 0x246})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0xc5)
rmdir(&(0x7f0000000100)='./control\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0})

2.048038417s ago: executing program 2 (id=3163):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r2 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0002000000000000000000000000000000000000d4d868572d857d18fc39b2afe07d9eb66d1c498f4ebc08edd8777fae0300000090f40c7c493488284970b74e8edd0b3904fa3c3e2df5f8442f3b3047abb937812ae2d26ae07da2d5b66000b069b738be3f3b560b58159580b4081b23050513a782b33e6c71fc6e64792a346b1e05cdba94", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001ff8305ed0e0581b4a00"], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="04010500f3fa06859c757d05d51f5552a6845bd4971408db63b7b4a7df92aec6faad05b5a026515df7e6f518215a1b5674fcb108ab18988f42c49cc0228eaed54352b9c7eb03b61f3b05f78b4a135f6d78b65a156c051b5aceff65bd33794e5202f6b37599e596886a318c950742daf68925e3469c81d08f556a3ef95ff0e5296e594c80dcbe291485df97da98165625ade72a7459590da0f1726adc589dda109a6e263c12dc3a328b2f28a86bc168"], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000002ec0), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESHEX=r0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="08000000000000003ea2000001000f0002000000c57fc89f368aa1487d62993fc23169e5433760d8c9c559160245d8ed", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000", @ANYRESOCT=r2, @ANYRESOCT=r4], 0x50, 0x84}}], 0x4, 0x880)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000001280)="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", 0x103}, {&(0x7f0000000780)="6724bf49a9", 0x5}, {&(0x7f0000001180)="6bd579223f3ff25e570739d4afa282315c6f68e9c2e2c24389c0dcf6a698b3aa5ae9be11ba578cf3de1d7c9122d5f5c3e312a404d36debcee3826109205a551579763d4d040b0457d40a442b404b5ae6ae2fb9ff7df7b7c9c6b71437486b6976f2abe20f9e532c4fade2a275c8065f82c93fc24ad02faf5f2e6516d4ac151816d5dd4aae94c8ba670345961697597c8fce611e301f806af8a31bad5d5abbdb29bd8023a59df9f0343048ab9454e43b041e1b1b1460105cb99edfde65b92f8072fb911a494d6e56b1841bd498e8ec0c5e46f55b5477b832578d22495febcd7fe1b5f31e549f8b6027a271d752b89f31a4f139a2", 0xf3}, {&(0x7f00000007c0)="8a1d50b9941c5c54980e532db7d80fe111c8f5c5a79ed9a990a3526449c70aaf0da1266d72cbed4f45", 0x29}, {&(0x7f0000000940)="5b86862650503afb02d4137d798882de92859deb7f23f7f8530f06ee2d508ddfc401f0ba5e52795675cc8b9e2607e28eee934cb292f6b5ec02710100dc", 0x3d}], 0x5, 0x0, 0x0, 0x8000}, 0x20008000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=<r6=>0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rpcgss_svc_authenticate\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001", @ANYRES64=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
unshare(0x2060600)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, 0x0, 0x0, 0x4}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x7, &(0x7f0000000280)={0x0, 0x35, 0x2}, &(0x7f0000000300)=<r11=>0x0)
getpeername(r3, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000500)=0x80)
timer_gettime(r11, &(0x7f0000000340))
preadv2(r5, &(0x7f0000001680)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000001480)=""/149, 0x95}, {&(0x7f0000000c40)=""/45, 0x2d}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/136, 0x88}, {&(0x7f0000000a40)=""/19, 0x13}], 0x7, 0x406, 0x2, 0x8)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r10}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r12}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone3(&(0x7f0000000680)={0x2004000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r10, r7}, 0xc)
ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006})
semget$private(0x0, 0x20000000102, 0x0)

1.472957833s ago: executing program 5 (id=3166):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
timerfd_create(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0)

1.243708187s ago: executing program 5 (id=3167):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

1.035290037s ago: executing program 5 (id=3168):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
r5 = socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

903.65509ms ago: executing program 1 (id=3169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

852.116315ms ago: executing program 2 (id=3170):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x8050)
epoll_create1(0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="401000002825000008001c00", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4)
shutdown(r2, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0)

809.055029ms ago: executing program 1 (id=3171):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYRES32=<r1=>0x0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r2=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4, 0x0, 0x8000000000}, 0x18)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r2, 0x0, 0x0}, 0x20)
r6 = socket$netlink(0x10, 0x3, 0x13)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8001)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000000)
sendmsg$TIPC_NL_BEARER_SET(r7, 0x0, 0x2404c140)
sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000e2", @ANYBLOB="08bb8131371515e7ba3bedfbbea73dedba78058bc85449b7f6aa0f73df2a680c5fd50541d6a4e1f10d6f02411dabec825947478cb58ee3d17405ef350c0cb1494aa36deda50e00dbea25b4b08091fc97582f69d17468a89b742459ca4a6a30c83f0f777d6794bb48d4201594f0b19e975952165dd7323e4d9668dc6c85e2a2173e0d6b64b112ab5b9ef6f994b74485b5ea"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
fcntl$dupfd(r2, 0x0, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES64=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="181a0000", @ANYRES32=r8, @ANYBLOB="0000000000000000180000000000010000000000090000007d882000010000008500000023000000983dc0ff00000000b7080000000000007b8af8ff00000000b70800002d2f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000852b0000a500000095000000000000007f5a500004000000"], &(0x7f0000000700)='syzkaller\x00', 0x100, 0x98, &(0x7f0000000bc0)=""/152, 0x41100, 0x2, '\x00', 0x0, @fallback=0x19, r8, 0x8, &(0x7f0000000780)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x1, 0x8, 0x3}, 0x10, 0x0, r4, 0x5, &(0x7f0000000900)=[r8, r2, r8, 0xffffffffffffffff, r8, r3, r3, r0, r8], &(0x7f00000009c0)=[{0x2, 0x2, 0x6, 0xc}, {0x2, 0x2, 0xf, 0x2}, {0x5, 0x3, 0x8}, {0x1, 0x4, 0x10, 0x1}, {0x3, 0x5, 0xc, 0x7}], 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4d, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10)
fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f3000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0)

788.949751ms ago: executing program 2 (id=3172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x90, 0xa4d)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f00000002c0)="6e3cca035502", 0x6, 0x1, 0x5, 0x4000000}, 0x1}, 0x1)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, <r5=>0x0}, &(0x7f00000003c0)=0xc)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x700, &(0x7f0000000a40)="$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")
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r7, &(0x7f0000000a80), 0x0}, 0x20)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
keyctl$get_persistent(0x16, r5, r6)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x10, 0x1403, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)

732.396477ms ago: executing program 2 (id=3173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0e54040, &(0x7f0000000a00)={[{@noblock_validity}, {@lazytime}, {@lazytime}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nolazytime}, {@noload}], [{@fsmagic={'fsmagic', 0x3d, 0xa}}, {@euid_lt}, {@dont_hash}, {@euid_lt}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
utimes(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x1}}, 0x24, 0x3)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000680)={0x8, 0x9, 0x7, 0x6, 0x9})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0xc7}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
dup2(r4, r4)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240), &(0x7f0000000840)=ANY=[@ANYBLOB="00fb8d0504af16ff49c231aa336bd50bae337b1b6b17389aacbd961d3d68a2ce541200b202cd714d1b296134ce2b41576df390f8537b3712f131f497f07969c00fa05ca40fbe887e514a2d07051994b7fd63f29ded2e47e5bd5162d6020a8c65a63c57198e9ef6b234d189f0acc128098c8a982123163f510162ffcf8e313d476e424bef5751bdd16d21288dfd"], 0x8d, 0x3)

651.950015ms ago: executing program 2 (id=3174):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
chmod(&(0x7f0000000000)='./file0\x00', 0x23f)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r5, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1)
readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1)

496.09759ms ago: executing program 4 (id=3175):
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||/c\x87\x94Y\xa0\x8ez\xadT\xc8\x8c\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4', 0x0)
fsopen(0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @rand_addr, <r2=>0x0}, &(0x7f00000001c0)=0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r2, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
accept4(r4, &(0x7f0000000880)=@isdn, &(0x7f0000000000)=0x80, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r5 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000440), 0x43, 0x0, 0x1, 0x3}, 0x28)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r5)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r7 = socket(0x80000000000000a, 0x2, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002680), 0x8402, 0x0)
fcntl$setownex(r8, 0xf, &(0x7f0000000000))
fcntl$setstatus(r8, 0x4, 0x2000)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000800))
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x101, {{0xa, 0x0, 0x0, @empty, 0x5}}, {{0xa, 0x4e1d, 0x0, @loopback}}}, 0x108)
preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000640)=""/134, 0x86}], 0x1, 0x95, 0x10000)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='pim6reg1\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000aeaa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe7, &(0x7f0000000340)=""/231}, 0x80)
r9 = dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r0}})

324.495167ms ago: executing program 0 (id=3176):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10, 0x0}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="49483ea3", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
read(r3, &(0x7f0000000200)=""/202, 0xca)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}})
tkill(r2, 0x7)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0x0)

268.971183ms ago: executing program 5 (id=3177):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)

265.121513ms ago: executing program 4 (id=3178):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x64}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r5, 0x0, 0x20)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x140d, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x24000000)
close(r5)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023896)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
setsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f0000000180)=0x6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}, 0x1, 0x0, 0x0, 0x4c004}, 0x0)

251.051985ms ago: executing program 1 (id=3179):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
setrlimit(0x40000000000008, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc100800000000001fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2d}, 0x53)
open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x900)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120)
write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
lseek(r1, 0xb964, 0xad23dbce7a62eb82)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
open$dir(0x0, 0x141040, 0x8)
openat$dir(0xffffffffffffff9c, 0x0, 0x121381, 0xa0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000001080)={{0x2, 0xbfd}, {0x100000000ffff, 0xfffffffb}, 0x1, 0x1})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x9, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000)

249.488095ms ago: executing program 5 (id=3180):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0e54040, &(0x7f0000000a00)={[{@noblock_validity}, {@lazytime}, {@lazytime}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nolazytime}, {@noload}], [{@fsmagic={'fsmagic', 0x3d, 0xa}}, {@euid_lt}, {@dont_hash}, {@euid_lt}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
utimes(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x1}}, 0x24, 0x3)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000680)={0x8, 0x9, 0x7, 0x6, 0x9})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0xc7}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=")
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240), &(0x7f0000000840)=ANY=[@ANYBLOB="00fb8d0504af16ff49c231aa336bd50bae337b1b6b17389aacbd961d3d68a2ce541200b202cd714d1b296134ce2b41576df390f8537b3712f131f497f07969c00fa05ca40fbe887e514a2d07051994b7fd63f29ded2e47e5bd5162d6020a8c65a63c57198e9ef6b234d189f0acc128098c8a982123163f510162ffcf8e313d476e424bef5751bdd16d21288dfd"], 0x8d, 0x3)

216.180818ms ago: executing program 5 (id=3181):
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, 0x0, &(0x7f00000005c0)=r2}, 0x20)

72.186562ms ago: executing program 1 (id=3182):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

22.197047ms ago: executing program 1 (id=3183):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0, 0x0, 0x4ef}, 0x18)
setreuid(0xee00, 0x0)

0s ago: executing program 1 (id=3184):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x64}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r4, 0x0, 0x20)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x140d, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x24000000)
close(r4)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x6, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}, 0x1, 0x0, 0x0, 0x4c004}, 0x0)

kernel console output (not intermixed with test programs):

T9556]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  185.346168][ T9556]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  185.346274][ T9556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.346292][ T9556] RIP: 0033:0x7f084e61f6c9
[  185.346382][ T9556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.346397][ T9556] RSP: 002b:00007f084d087038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  185.346414][ T9556] RAX: 0000000000000000 RBX: 00007f084e875fa0 RCX: 00007f084e61f6c9
[  185.346424][ T9556] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  185.346477][ T9556] RBP: 00007f084d087090 R08: 0000000000000000 R09: 0000000000000000
[  185.346489][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.346500][ T9556] R13: 00007f084e876038 R14: 00007f084e875fa0 R15: 00007fffb9b2e218
[  185.346519][ T9556]  </TASK>
[  185.634963][ T9560] IPv6: addrconf: prefix option has invalid lifetime
[  185.977067][ T9574] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  185.985647][ T9569] loop0: detected capacity change from 0 to 512
[  186.082222][ T9569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.094804][ T9569] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.200158][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.219101][ T9589] netlink: 'syz.0.1909': attribute type 1 has an invalid length.
[  186.219153][ T9584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1908'.
[  186.226938][ T9589] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1909'.
[  186.269262][ T9594] loop0: detected capacity change from 0 to 128
[  186.276651][ T9594] vfat: Unknown parameter 'ýÿÿÿÿÿÿÿ'
[  186.294804][ T9594] ALSA: seq fatal error: cannot create timer (-19)
[  186.388345][ T9605] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  186.759180][ T9629] loop0: detected capacity change from 0 to 512
[  186.765751][ T9629] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  187.066543][   T29] kauditd_printk_skb: 867 callbacks suppressed
[  187.066558][   T29] audit: type=1326 audit(1763511763.547:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.103460][ T9638] siw: device registration error -23
[  187.128776][   T29] audit: type=1326 audit(1763511763.547:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.128806][   T29] audit: type=1326 audit(1763511763.547:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.128889][   T29] audit: type=1326 audit(1763511763.547:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.128911][   T29] audit: type=1326 audit(1763511763.547:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.128956][   T29] audit: type=1326 audit(1763511763.547:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.128975][   T29] audit: type=1326 audit(1763511763.547:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.129062][   T29] audit: type=1326 audit(1763511763.547:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.129124][   T29] audit: type=1326 audit(1763511763.547:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.129147][   T29] audit: type=1326 audit(1763511763.547:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  187.906948][ T9740] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.929262][ T9743] loop0: detected capacity change from 0 to 512
[  187.949862][ T9743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.031553][ T9740] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.064405][ T9743] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.142344][ T9740] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.193536][ T9794] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.223550][ T9740] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.275216][ T9794] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.326399][ T2346] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.338111][ T2346] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.349707][ T2346] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.368832][ T9794] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.387383][ T2346] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.450063][ T9794] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.575733][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.684539][ T9818] loop0: detected capacity change from 0 to 2048
[  188.756219][ T9818] Alternate GPT is invalid, using primary GPT.
[  188.762791][ T9818]  loop0: p2 p3 p7
[  188.870695][ T9839] siw: device registration error -23
[  188.922038][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  188.988697][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  189.001597][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  189.092059][ T9859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1951'.
[  189.182969][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'.
[  189.233834][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'.
[  189.423373][ T9917] 9pnet_fd: Insufficient options for proto=fd
[  189.463840][ T9924] 9p: Unknown access argument : -22
[  189.895689][ T9940] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.974860][ T9942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1964'.
[  189.992570][ T9940] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.082693][ T9940] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.125631][ T9940] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.144704][ T4023] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.163971][ T4023] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.195531][ T4023] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.205161][ T4023] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.216562][ T4023] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.224847][ T4023] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.233153][ T4023] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.244089][ T4023] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.503032][ T9952] loop0: detected capacity change from 0 to 512
[  190.509865][ T9952] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  190.564649][ T9953] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.738351][ T9953] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.773554][ T9960] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1970'.
[  190.835849][ T9953] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.874088][ T9953] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.000104][ T9975] IPv6: addrconf: prefix option has invalid lifetime
[  191.471519][ T9987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1981'.
[  191.539857][ T4017] Bluetooth: hci0: Frame reassembly failed (-84)
[  191.930818][T10002] IPv6: addrconf: prefix option has invalid lifetime
[  192.209387][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  192.558562][   T29] kauditd_printk_skb: 180 callbacks suppressed
[  192.558578][   T29] audit: type=1326 audit(1763511769.037:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.588309][   T29] audit: type=1326 audit(1763511769.037:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.611773][   T29] audit: type=1326 audit(1763511769.037:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.635152][   T29] audit: type=1326 audit(1763511769.037:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.658623][   T29] audit: type=1326 audit(1763511769.037:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.682039][   T29] audit: type=1326 audit(1763511769.037:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.705571][   T29] audit: type=1326 audit(1763511769.037:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.729071][   T29] audit: type=1326 audit(1763511769.037:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.752535][   T29] audit: type=1326 audit(1763511769.037:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.775998][   T29] audit: type=1326 audit(1763511769.037:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  192.813236][T10060] netlink: 'syz.4.2000': attribute type 10 has an invalid length.
[  192.822493][T10060] team0: Device ipvlan0 failed to register rx_handler
[  192.923054][T10072] FAULT_INJECTION: forcing a failure.
[  192.923054][T10072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  192.936166][T10072] CPU: 1 UID: 0 PID: 10072 Comm: syz.1.2006 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  192.936193][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  192.936205][T10072] Call Trace:
[  192.936242][T10072]  <TASK>
[  192.936250][T10072]  __dump_stack+0x1d/0x30
[  192.936273][T10072]  dump_stack_lvl+0xe8/0x140
[  192.936294][T10072]  dump_stack+0x15/0x1b
[  192.936312][T10072]  should_fail_ex+0x265/0x280
[  192.936364][T10072]  should_fail+0xb/0x20
[  192.936381][T10072]  should_fail_usercopy+0x1a/0x20
[  192.936402][T10072]  _copy_from_user+0x1c/0xb0
[  192.936434][T10072]  ___sys_sendmsg+0xc1/0x1d0
[  192.936540][T10072]  __x64_sys_sendmsg+0xd4/0x160
[  192.936565][T10072]  x64_sys_call+0x191e/0x3000
[  192.936586][T10072]  do_syscall_64+0xd2/0x200
[  192.936607][T10072]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  192.936672][T10072]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  192.936704][T10072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.936769][T10072] RIP: 0033:0x7fedf556f6c9
[  192.936784][T10072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.936803][T10072] RSP: 002b:00007fedf3fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.936822][T10072] RAX: ffffffffffffffda RBX: 00007fedf57c5fa0 RCX: 00007fedf556f6c9
[  192.936869][T10072] RDX: 0000000000000840 RSI: 0000200000000280 RDI: 0000000000000006
[  192.936881][T10072] RBP: 00007fedf3fd7090 R08: 0000000000000000 R09: 0000000000000000
[  192.936894][T10072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.936906][T10072] R13: 00007fedf57c6038 R14: 00007fedf57c5fa0 R15: 00007ffe8f8e5be8
[  192.936926][T10072]  </TASK>
[  193.155641][T10076] netlink: 'syz.2.2008': attribute type 1 has an invalid length.
[  193.163416][T10076] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2008'.
[  193.206295][T10080] siw: device registration error -23
[  193.256124][T10084] IPv6: addrconf: prefix option has invalid lifetime
[  193.287290][T10088] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  193.317065][T10093] hub 6-0:1.0: USB hub found
[  193.321984][T10093] hub 6-0:1.0: 8 ports detected
[  193.550427][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  193.550865][ T3499] Bluetooth: hci0: command 0x1003 tx timeout
[  193.676428][T10115] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  193.686733][T10115] vhci_hcd: invalid port number 96
[  193.691914][T10115] vhci_hcd: default hub control req: 0300 v00ab i0060 l0
[  193.933661][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'.
[  193.953839][T10156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10156 comm=syz.4.2039
[  193.966541][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2039'.
[  193.984801][T10156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10156 comm=syz.4.2039
[  194.519380][  T408] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.543226][  T408] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.562716][  T408] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.571764][  T408] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.598303][T10192] ALSA: seq fatal error: cannot create timer (-19)
[  194.698250][T10206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2056'.
[  195.221882][T10216] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.277217][T10216] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.356934][T10216] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.397055][T10240] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2069'.
[  195.424437][T10216] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.471835][T10244] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  195.472827][T10246] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2072'.
[  195.588844][   T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.606185][   T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.622751][   T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.622877][   T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.734518][T10271] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  195.755109][T10273] 9pnet_fd: Insufficient options for proto=fd
[  195.776611][T10277] siw: device registration error -23
[  195.815586][T10282] 9pnet_fd: Insufficient options for proto=fd
[  196.768139][T10308] macvtap1: entered promiscuous mode
[  196.773516][T10308] macvtap1: entered allmulticast mode
[  196.811980][T10323] 9pnet_fd: Insufficient options for proto=fd
[  196.874551][T10327] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2108'.
[  196.944798][T10336] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  197.201195][T10359] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2122'.
[  197.315766][T10369] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2126'.
[  197.615072][   T29] kauditd_printk_skb: 936 callbacks suppressed
[  197.615087][   T29] audit: type=1326 audit(1763511774.097:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  197.765483][   T29] audit: type=1326 audit(1763511774.097:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  197.815375][T10392] siw: device registration error -23
[  198.062087][T10396] wg1 speed is unknown, defaulting to 1000
[  198.068246][T10396] wg1 speed is unknown, defaulting to 1000
[  198.074482][T10396] wg1 speed is unknown, defaulting to 1000
[  198.080424][   T29] audit: type=1400 audit(1763511774.547:7952): avc:  denied  { bind } for  pid=10393 comm="syz.1.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  198.081840][T10396] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  198.121597][T10396] wg1 speed is unknown, defaulting to 1000
[  198.152446][T10396] wg1 speed is unknown, defaulting to 1000
[  198.158600][T10396] wg1 speed is unknown, defaulting to 1000
[  198.170630][T10396] wg1 speed is unknown, defaulting to 1000
[  198.178994][T10396] wg1 speed is unknown, defaulting to 1000
[  198.206214][T10396] wg1 speed is unknown, defaulting to 1000
[  198.402576][T10438] wg1 speed is unknown, defaulting to 1000
[  198.853410][T10444] netlink: 'syz.5.2143': attribute type 9 has an invalid length.
[  198.927265][T10454] siw: device registration error -23
[  199.110433][T10464] 
€Â: renamed from vlan1 (while UP)
[  199.118783][   T29] audit: type=1400 audit(1763511775.587:7953): avc:  denied  { setopt } for  pid=10463 comm="syz.2.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  199.144479][T10464] 8021q: adding VLAN 0 to HW filter on device bond1
[  199.160368][   T29] audit: type=1326 audit(1763511775.637:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  199.162286][T10464] bond0: (slave bond1): Enslaving as an active interface with an up link
[  199.183904][   T29] audit: type=1326 audit(1763511775.637:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  199.215759][   T29] audit: type=1326 audit(1763511775.637:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  199.215807][   T29] audit: type=1326 audit(1763511775.637:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  199.215853][   T29] audit: type=1326 audit(1763511775.637:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  199.215874][   T29] audit: type=1326 audit(1763511775.637:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  199.338683][T10470] ALSA: seq fatal error: cannot create timer (-19)
[  199.492710][T10485] siw: device registration error -23
[  199.532863][T10490] netlink: 'syz.5.2161': attribute type 1 has an invalid length.
[  200.107452][T10519] macvtap1: entered promiscuous mode
[  200.112879][T10519] macvtap1: entered allmulticast mode
[  200.193224][T10527] bond2: option downdelay: invalid value (18446744073709551615)
[  200.200923][T10527] bond2: option downdelay: allowed values 0 - 2147483647
[  200.211937][T10527] bond2 (unregistering): Released all slaves
[  200.221503][T10525] 
@ÿ: renamed from hsr0 (while UP)
[  200.324219][T10536] wg1 speed is unknown, defaulting to 1000
[  200.332348][T10527] x_tables: duplicate underflow at hook 1
[  200.434576][T10536] siw: device registration error -23
[  200.453218][T10548] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  200.459825][T10548] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  200.468034][T10548] vhci_hcd vhci_hcd.0: Device attached
[  200.597829][T10555] FAULT_INJECTION: forcing a failure.
[  200.597829][T10555] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.610958][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.5.2183 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  200.610985][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  200.610998][T10555] Call Trace:
[  200.611004][T10555]  <TASK>
[  200.611011][T10555]  __dump_stack+0x1d/0x30
[  200.611034][T10555]  dump_stack_lvl+0xe8/0x140
[  200.611067][T10555]  dump_stack+0x15/0x1b
[  200.611085][T10555]  should_fail_ex+0x265/0x280
[  200.611118][T10555]  should_fail+0xb/0x20
[  200.611192][T10555]  should_fail_usercopy+0x1a/0x20
[  200.611213][T10555]  strncpy_from_user+0x25/0x230
[  200.611241][T10555]  ? __fget_files+0x184/0x1c0
[  200.611269][T10555]  __se_sys_request_key+0x57/0x290
[  200.611338][T10555]  ? fput+0x8f/0xc0
[  200.611359][T10555]  __x64_sys_request_key+0x55/0x70
[  200.611389][T10555]  x64_sys_call+0x1d98/0x3000
[  200.611411][T10555]  do_syscall_64+0xd2/0x200
[  200.611537][T10555]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  200.611565][T10555]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  200.611598][T10555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.611619][T10555] RIP: 0033:0x7f352f44f6c9
[  200.611635][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.611653][T10555] RSP: 002b:00007f352deaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  200.611690][T10555] RAX: ffffffffffffffda RBX: 00007f352f6a5fa0 RCX: 00007f352f44f6c9
[  200.611702][T10555] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 00002000000000c0
[  200.611715][T10555] RBP: 00007f352deaf090 R08: 0000000000000000 R09: 0000000000000000
[  200.611728][T10555] R10: fffffffffffffffc R11: 0000000000000246 R12: 0000000000000001
[  200.611740][T10555] R13: 00007f352f6a6038 R14: 00007f352f6a5fa0 R15: 00007fff65f38688
[  200.611760][T10555]  </TASK>
[  200.838326][T10558] ALSA: seq fatal error: cannot create timer (-19)
[  200.850330][    T9] usb 4-1: SetAddress Request (2) to port 0
[  200.856278][    T9] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd
[  200.928259][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.951346][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.109641][T10573] lo speed is unknown, defaulting to 1000
[  201.115544][T10573] lo speed is unknown, defaulting to 1000
[  201.121664][T10573] lo speed is unknown, defaulting to 1000
[  201.128560][T10573] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  201.151726][T10573] lo speed is unknown, defaulting to 1000
[  201.157802][T10573] lo speed is unknown, defaulting to 1000
[  201.166581][T10573] lo speed is unknown, defaulting to 1000
[  201.172879][T10573] lo speed is unknown, defaulting to 1000
[  201.178956][T10573] lo speed is unknown, defaulting to 1000
[  201.242562][T10549] vhci_hcd: connection reset by peer
[  201.248461][  T408] vhci_hcd: stop threads
[  201.252821][  T408] vhci_hcd: release socket
[  201.257237][  T408] vhci_hcd: disconnect device
[  201.343802][T10573] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  201.354717][T10573] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  201.479839][T10591] ALSA: seq fatal error: cannot create timer (-19)
[  201.616973][T10599] wg1 speed is unknown, defaulting to 1000
[  201.623272][T10599] lo speed is unknown, defaulting to 1000
[  201.827181][T10611] netlink: 'syz.0.2205': attribute type 1 has an invalid length.
[  201.866259][T10611] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2205'.
[  201.878165][T10611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2205'.
[  202.175930][T10627] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  202.318768][T10648] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2218'.
[  202.328321][T10648] netlink: 'syz.0.2218': attribute type 21 has an invalid length.
[  202.336416][T10648] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2218'.
[  202.349622][T10637] program syz.2.2217 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  202.687663][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a769000: rx timeout, send abort
[  202.695917][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a769200: rx timeout, send abort
[  202.704216][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a769000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  202.718509][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a769200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  202.765850][   T29] kauditd_printk_skb: 265 callbacks suppressed
[  202.765881][   T29] audit: type=1326 audit(1763511779.247:8225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  202.824113][T10693] 9pnet_fd: Insufficient options for proto=fd
[  202.830468][   T29] audit: type=1326 audit(1763511779.287:8226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  202.853977][   T29] audit: type=1326 audit(1763511779.287:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  202.877579][   T29] audit: type=1326 audit(1763511779.287:8228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  202.877606][   T29] audit: type=1326 audit(1763511779.287:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  202.924426][   T29] audit: type=1326 audit(1763511779.287:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  202.948002][   T29] audit: type=1326 audit(1763511779.287:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  202.971481][   T29] audit: type=1326 audit(1763511779.287:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  202.995031][   T29] audit: type=1326 audit(1763511779.287:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  203.018488][   T29] audit: type=1326 audit(1763511779.287:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  203.050979][  T408] Bluetooth: hci1: Frame reassembly failed (-84)
[  203.520527][T10708] wg1 speed is unknown, defaulting to 1000
[  203.520902][T10708] lo speed is unknown, defaulting to 1000
[  203.859485][T10716] wg1 speed is unknown, defaulting to 1000
[  203.859908][T10716] lo speed is unknown, defaulting to 1000
[  204.304043][T10726] ALSA: seq fatal error: cannot create timer (-19)
[  204.558537][T10740] 9pnet_fd: Insufficient options for proto=fd
[  205.070326][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  205.070530][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  205.082544][ T4315] Bluetooth: hci1: command 0x1003 tx timeout
[  205.088528][ T3499] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  205.437206][T10764] ALSA: seq fatal error: cannot create timer (-19)
[  205.534461][T10775] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  205.705513][T10785] 9pnet_fd: Insufficient options for proto=fd
[  205.950322][    T9] usb 4-1: device descriptor read/8, error -110
[  206.030587][ T4017] Bluetooth: hci0: Frame reassembly failed (-84)
[  206.064011][    T9] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd
[  206.091248][    T9] usb 4-1: enqueue for inactive port 0
[  206.103322][    T9] usb 4-1: enqueue for inactive port 0
[  206.117578][    T9] usb 4-1: enqueue for inactive port 0
[  206.195100][T10814] wg1 speed is unknown, defaulting to 1000
[  206.201306][T10814] lo speed is unknown, defaulting to 1000
[  206.782507][T10838] siw: device registration error -23
[  207.094474][T10871] ALSA: seq fatal error: cannot create timer (-19)
[  207.190555][    T9] usb usb4-port1: attempt power cycle
[  207.376227][T10886] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98
[  207.524388][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'.
[  207.633620][T10905] netlink: 'syz.1.2300': attribute type 3 has an invalid length.
[  207.666937][T10904] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  207.688869][T10904] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  207.878631][T10914] siw: device registration error -23
[  208.055352][   T29] kauditd_printk_skb: 648 callbacks suppressed
[  208.055363][   T29] audit: type=1326 audit(1763511784.537:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.055391][   T29] audit: type=1326 audit(1763511784.537:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.062196][   T29] audit: type=1326 audit(1763511784.547:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.110367][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  208.159540][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  208.228942][   T29] audit: type=1326 audit(1763511784.577:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.228994][   T29] audit: type=1326 audit(1763511784.577:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.229017][   T29] audit: type=1326 audit(1763511784.577:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.229051][   T29] audit: type=1326 audit(1763511784.577:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.229073][   T29] audit: type=1326 audit(1763511784.577:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.229140][   T29] audit: type=1326 audit(1763511784.577:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  208.229226][   T29] audit: type=1326 audit(1763511784.577:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10919 comm="syz.5.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f352f44df10 code=0x7ffc0000
[  208.770464][T10947] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  208.777086][T10947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  208.785253][T10947] vhci_hcd vhci_hcd.0: Device attached
[  208.792505][T10953] vhci_hcd: connection closed
[  208.793296][   T31] vhci_hcd: stop threads
[  208.802336][   T31] vhci_hcd: release socket
[  208.806762][   T31] vhci_hcd: disconnect device
[  208.855021][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'.
[  208.886803][T10960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.966968][T10960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.020660][    T9] usb usb4-port1: unable to enumerate USB device
[  209.026302][T10966] 9pnet_fd: Insufficient options for proto=fd
[  209.035756][T10960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.085609][T10960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.150987][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.163883][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.181916][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.191041][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.560826][T10973] wg1 speed is unknown, defaulting to 1000
[  209.567121][T10973] lo speed is unknown, defaulting to 1000
[  209.707321][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[  209.798620][T10985] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  210.383768][T11040] 9pnet_fd: Insufficient options for proto=fd
[  210.396696][T11037] netlink: 16 bytes leftover after parsing attributes in process `+}[@'.
[  210.590361][T11062] wg1 speed is unknown, defaulting to 1000
[  210.596488][T11062] lo speed is unknown, defaulting to 1000
[  211.031260][T11076] siw: device registration error -23
[  211.067573][T11080] serio: Serial port ptm1
[  211.184607][T11087] ALSA: seq fatal error: cannot create timer (-19)
[  211.264775][T11100] netlink: 'syz.2.2368': attribute type 3 has an invalid length.
[  211.278976][T11102] netlink: 'syz.4.2369': attribute type 3 has an invalid length.
[  211.324568][T11106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2371'.
[  211.397050][T11120] 9pnet_fd: Insufficient options for proto=fd
[  211.710450][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  211.717760][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  212.229967][T11146] wg1 speed is unknown, defaulting to 1000
[  212.236219][T11146] lo speed is unknown, defaulting to 1000
[  212.693996][   T44] Bluetooth: hci0: sending frame failed (-49)
[  212.700245][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  212.726313][T11176] wg1 speed is unknown, defaulting to 1000
[  212.734179][T11176] lo speed is unknown, defaulting to 1000
[  212.977110][T11181] 9pnet_fd: Insufficient options for proto=fd
[  213.060520][   T29] kauditd_printk_skb: 539 callbacks suppressed
[  213.060534][   T29] audit: type=1326 audit(1763511789.537:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.090305][   T29] audit: type=1326 audit(1763511789.537:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.113965][   T29] audit: type=1326 audit(1763511789.537:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.137475][   T29] audit: type=1326 audit(1763511789.537:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.160980][   T29] audit: type=1326 audit(1763511789.537:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.184372][   T29] audit: type=1326 audit(1763511789.537:9437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.207925][   T29] audit: type=1326 audit(1763511789.537:9438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.231308][   T29] audit: type=1326 audit(1763511789.537:9439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.254864][   T29] audit: type=1326 audit(1763511789.537:9440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.278346][   T29] audit: type=1326 audit(1763511789.537:9441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  213.432325][T11194] block device autoloading is deprecated and will be removed.
[  213.669783][T11211] wg1 speed is unknown, defaulting to 1000
[  213.675911][T11211] lo speed is unknown, defaulting to 1000
[  213.706804][T11211] loop5: detected capacity change from 0 to 512
[  213.713388][T11211] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  214.035819][T11235] netlink: 'syz.0.2420': attribute type 3 has an invalid length.
[  214.123430][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'.
[  214.240565][T11245] 9pnet_fd: Insufficient options for proto=fd
[  214.392110][T11238] SELinux: failed to load policy
[  214.471574][T11248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=11248 comm=syz.5.2426
[  214.538985][T11253] netlink: 'syz.5.2426': attribute type 13 has an invalid length.
[  214.549942][T11253] gretap0: refused to change device tx_queue_len
[  214.556988][T11253] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  214.572745][    T9] lo speed is unknown, defaulting to 1000
[  214.727419][T11260] tipc: Started in network mode
[  214.732348][T11260] tipc: Node identity ac14140f, cluster identity 4711
[  214.739472][T11260] tipc: New replicast peer: 255.255.255.255
[  214.745603][T11260] tipc: Enabled bearer <udp:syz2>, priority 10
[  215.275629][T11288] wg1 speed is unknown, defaulting to 1000
[  215.282338][T11288] lo speed is unknown, defaulting to 1000
[  215.714449][T11301] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  215.870338][ T3422] tipc: Node number set to 2886997007
[  216.108993][T11325] wg1 speed is unknown, defaulting to 1000
[  216.120674][T11325] lo speed is unknown, defaulting to 1000
[  216.245739][T11325] netlink: 'syz.4.2456': attribute type 1 has an invalid length.
[  216.270239][T11336] ALSA: seq fatal error: cannot create timer (-19)
[  216.274658][T11325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2456'.
[  216.464121][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'.
[  216.525326][T11352] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  216.536256][T11352] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  216.987477][T11364] ALSA: seq fatal error: cannot create timer (-19)
[  217.099767][T11369] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2472'.
[  217.123437][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2472'.
[  217.751190][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'.
[  218.223789][   T29] kauditd_printk_skb: 628 callbacks suppressed
[  218.223827][   T29] audit: type=1326 audit(1763511794.707:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.253879][   T29] audit: type=1326 audit(1763511794.707:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.277606][   T29] audit: type=1326 audit(1763511794.717:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.301333][   T29] audit: type=1326 audit(1763511794.717:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.324950][   T29] audit: type=1326 audit(1763511794.717:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.348598][   T29] audit: type=1326 audit(1763511794.717:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.372241][   T29] audit: type=1326 audit(1763511794.717:10076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.396010][   T29] audit: type=1326 audit(1763511794.717:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.419706][   T29] audit: type=1326 audit(1763511794.717:10078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.443342][   T29] audit: type=1326 audit(1763511794.717:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.2.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  218.550880][T11431] 9pnet_fd: Insufficient options for proto=fd
[  218.602754][T11432] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.652030][T11432] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.712230][T11432] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.772674][T11432] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.811576][T11436] ALSA: seq fatal error: cannot create timer (-19)
[  218.842172][ T4023] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.855306][ T4023] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.864007][ T4023] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.872405][ T4023] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.907068][T11442] wg1 speed is unknown, defaulting to 1000
[  218.913152][T11442] lo speed is unknown, defaulting to 1000
[  220.994641][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2517'.
[  221.192072][T11523] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.262869][T11523] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.303381][T11523] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.363967][T11523] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.421857][  T380] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.441640][  T380] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.491254][  T380] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.508419][  T380] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.731086][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'.
[  221.864578][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'.
[  221.942998][T11549] wg1 speed is unknown, defaulting to 1000
[  221.950821][T11549] lo speed is unknown, defaulting to 1000
[  222.018177][T11558] siw: device registration error -23
[  222.592499][T11574] wg1 speed is unknown, defaulting to 1000
[  222.598509][T11574] lo speed is unknown, defaulting to 1000
[  222.727638][T11577] netlink: 'syz.0.2547': attribute type 27 has an invalid length.
[  222.842083][T11578] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.859459][T11578] 8021q: adding VLAN 0 to HW filter on device team0
[  222.869833][T11578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.885528][  T380] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.894799][  T380] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.906916][  T380] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.929419][  T380] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.267778][   T29] kauditd_printk_skb: 403 callbacks suppressed
[  223.267830][   T29] audit: type=1326 audit(1763511799.747:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  223.297617][   T29] audit: type=1326 audit(1763511799.747:10484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  223.320638][   T29] audit: type=1326 audit(1763511799.747:10485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f352f44f703 code=0x7ffc0000
[  223.343502][   T29] audit: type=1326 audit(1763511799.747:10486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f352f44f703 code=0x7ffc0000
[  223.366417][   T29] audit: type=1326 audit(1763511799.747:10487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  223.389430][   T29] audit: type=1326 audit(1763511799.747:10488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  223.412457][   T29] audit: type=1326 audit(1763511799.747:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  223.435531][   T29] audit: type=1326 audit(1763511799.747:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  223.458547][   T29] audit: type=1326 audit(1763511799.747:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  223.481529][   T29] audit: type=1326 audit(1763511799.747:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  223.632388][T11630] wg1 speed is unknown, defaulting to 1000
[  223.638862][T11630] lo speed is unknown, defaulting to 1000
[  223.702073][T11627] SELinux: ebitmap: empty map
[  223.707969][T11627] SELinux: failed to load policy
[  223.734662][T11632] FAULT_INJECTION: forcing a failure.
[  223.734662][T11632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.747814][T11632] CPU: 0 UID: 0 PID: 11632 Comm: syz.1.2568 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  223.747839][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  223.747849][T11632] Call Trace:
[  223.747854][T11632]  <TASK>
[  223.747861][T11632]  __dump_stack+0x1d/0x30
[  223.747937][T11632]  dump_stack_lvl+0xe8/0x140
[  223.747959][T11632]  dump_stack+0x15/0x1b
[  223.747977][T11632]  should_fail_ex+0x265/0x280
[  223.748006][T11632]  should_fail+0xb/0x20
[  223.748020][T11632]  should_fail_usercopy+0x1a/0x20
[  223.748109][T11632]  _copy_to_user+0x20/0xa0
[  223.748133][T11632]  simple_read_from_buffer+0xb5/0x130
[  223.748154][T11632]  proc_fail_nth_read+0x10e/0x150
[  223.748183][T11632]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  223.748229][T11632]  vfs_read+0x1a8/0x770
[  223.748253][T11632]  ? __fget_files+0x184/0x1c0
[  223.748339][T11632]  ? __rcu_read_unlock+0x4f/0x70
[  223.748361][T11632]  ? __fget_files+0x184/0x1c0
[  223.748388][T11632]  ksys_read+0xda/0x1a0
[  223.748410][T11632]  __x64_sys_read+0x40/0x50
[  223.748523][T11632]  x64_sys_call+0x27c0/0x3000
[  223.748546][T11632]  do_syscall_64+0xd2/0x200
[  223.748623][T11632]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  223.748722][T11632]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  223.748751][T11632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.748789][T11632] RIP: 0033:0x7fedf556e0dc
[  223.748805][T11632] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  223.748824][T11632] RSP: 002b:00007fedf3fb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  223.748907][T11632] RAX: ffffffffffffffda RBX: 00007fedf57c6090 RCX: 00007fedf556e0dc
[  223.748918][T11632] RDX: 000000000000000f RSI: 00007fedf3fb60a0 RDI: 0000000000000004
[  223.748963][T11632] RBP: 00007fedf3fb6090 R08: 0000000000000000 R09: 0000000000000000
[  223.748977][T11632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.748990][T11632] R13: 00007fedf57c6128 R14: 00007fedf57c6090 R15: 00007ffe8f8e5be8
[  223.749026][T11632]  </TASK>
[  223.978911][T11634] siw: device registration error -23
[  224.126048][T11651] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  224.137209][T11651] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  224.952003][T11718] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.016629][T11718] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.122421][T11718] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.183317][T11718] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.239135][ T4023] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.251185][ T4023] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.263830][ T4023] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.275792][ T4023] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.799067][T11730] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.843140][T11730] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.883471][T11730] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.983091][T11730] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.006911][T11745] netlink: 'syz.5.2613': attribute type 12 has an invalid length.
[  226.548489][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'.
[  226.766541][T11764] ALSA: seq fatal error: cannot create timer (-19)
[  227.836196][T11821] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  227.872640][T11821] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  228.083301][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2644'.
[  228.113889][T11827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1872 sclass=netlink_route_socket pid=11827 comm=syz.1.2644
[  228.189115][T11833] netlink: 'syz.5.2647': attribute type 1 has an invalid length.
[  228.208606][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2647'.
[  229.380733][T11870] bridge1: entered promiscuous mode
[  229.537491][T11884] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2666'.
[  229.839309][T11894] ALSA: seq fatal error: cannot create timer (-19)
[  229.869838][T11897] sit0: entered allmulticast mode
[  229.878825][   T29] kauditd_printk_skb: 1051 callbacks suppressed
[  229.878837][   T29] audit: type=1326 audit(1763511806.357:11544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  229.909157][   T29] audit: type=1326 audit(1763511806.357:11545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  229.932841][   T29] audit: type=1326 audit(1763511806.357:11546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  229.956469][   T29] audit: type=1326 audit(1763511806.357:11547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  229.984897][  T408] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.995851][  T408] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.006873][  T408] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.017795][  T408] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.038261][   T29] audit: type=1326 audit(1763511806.517:11548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  230.070076][   T29] audit: type=1326 audit(1763511806.517:11549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  230.093657][   T29] audit: type=1326 audit(1763511806.527:11550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  230.117329][   T29] audit: type=1326 audit(1763511806.527:11551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  230.140973][   T29] audit: type=1326 audit(1763511806.527:11552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  230.164558][   T29] audit: type=1326 audit(1763511806.527:11553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.4.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084e61f6c9 code=0x7ffc0000
[  233.404650][T11923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.434208][T11923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.512855][T11968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.521921][T11968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.534788][T11968] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  234.088036][T11976] siw: device registration error -23
[  234.246715][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[  234.350988][T11996] wg1 speed is unknown, defaulting to 1000
[  234.357086][T11996] lo speed is unknown, defaulting to 1000
[  234.449763][T12003] siw: device registration error -23
[  234.517269][T12008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2712'.
[  234.638243][T12025] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  234.649295][T12025] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  234.665842][T12026] wg1 speed is unknown, defaulting to 1000
[  234.673118][T12026] lo speed is unknown, defaulting to 1000
[  235.489346][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2723'.
[  235.786910][   T29] kauditd_printk_skb: 382 callbacks suppressed
[  235.786979][   T29] audit: type=1326 audit(1763511812.267:11936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  235.818977][   T29] audit: type=1326 audit(1763511812.267:11937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  235.823746][T12052] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  235.842587][   T29] audit: type=1326 audit(1763511812.277:11938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  235.853624][T12052] SELinux: failed to load policy
[  235.874661][   T29] audit: type=1326 audit(1763511812.277:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  235.903150][   T29] audit: type=1326 audit(1763511812.277:11940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  235.926743][   T29] audit: type=1326 audit(1763511812.277:11941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  235.950501][   T29] audit: type=1326 audit(1763511812.307:11942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  235.993119][   T29] audit: type=1326 audit(1763511812.307:11943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  236.016863][   T29] audit: type=1326 audit(1763511812.307:11944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  236.040696][   T29] audit: type=1326 audit(1763511812.307:11945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fedf556f6c9 code=0x7ffc0000
[  236.270306][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  236.270316][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  236.335185][T12063] 9pnet_fd: Insufficient options for proto=fd
[  236.416122][T12067] netlink: '+}[@': attribute type 39 has an invalid length.
[  236.539319][T12075] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  236.550249][T12075] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  236.841760][T12079] wg1 speed is unknown, defaulting to 1000
[  236.866027][T12079] lo speed is unknown, defaulting to 1000
[  237.531407][T12106] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.601641][T12106] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.671817][T12106] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.723001][T12106] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.774776][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2755'.
[  237.799828][  T408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.826045][  T408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.838791][  T408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.848836][  T408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.930971][T12128] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  237.941206][T12128] SELinux: failed to load policy
[  237.948618][T12130] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.001949][T12130] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.101701][T12130] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.162346][T12130] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.239156][  T408] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.257968][  T408] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.266719][  T408] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.282166][  T408] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.426755][T12148] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.472518][T12148] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.571919][T12148] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.611387][T12158] siw: device registration error -23
[  238.786991][T12148] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.273254][T12173] netlink: 'syz.1.2777': attribute type 1 has an invalid length.
[  239.295326][T12171] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.311068][T12173] 8021q: adding VLAN 0 to HW filter on device bond1
[  239.322912][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'.
[  239.332907][T12173] bond1 (unregistering): Released all slaves
[  239.343345][T12171] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.402015][T12171] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.452330][T12171] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.546889][ T4017] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.569269][ T4017] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.578074][ T4017] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.586631][ T4017] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.648134][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'.
[  239.873734][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'.
[  240.044377][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811afb2800: rx timeout, send abort
[  240.052585][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811afb3200: rx timeout, send abort
[  240.060852][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811afb2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  240.075166][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811afb3200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  240.400784][T12211] netlink: 8 bytes leftover after parsing attributes in process `gtp'.
[  240.631250][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.641276][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.653307][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2795'.
[  240.684139][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2795'.
[  240.723541][T12238] syzkaller1: entered promiscuous mode
[  240.723558][T12238] syzkaller1: entered allmulticast mode
[  240.797091][   T29] kauditd_printk_skb: 646 callbacks suppressed
[  240.797101][   T29] audit: type=1326 audit(1763511817.277:12592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e8db6567 code=0x7ffc0000
[  240.826778][   T29] audit: type=1326 audit(1763511817.277:12593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e8d5b789 code=0x7ffc0000
[  240.850337][   T29] audit: type=1326 audit(1763511817.277:12594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  240.874001][   T29] audit: type=1326 audit(1763511817.337:12595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e8db6567 code=0x7ffc0000
[  240.897610][   T29] audit: type=1326 audit(1763511817.337:12596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e8d5b789 code=0x7ffc0000
[  240.921209][   T29] audit: type=1326 audit(1763511817.337:12597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  240.944842][   T29] audit: type=1326 audit(1763511817.337:12598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e8db6567 code=0x7ffc0000
[  240.968394][   T29] audit: type=1326 audit(1763511817.337:12599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67e8d5b789 code=0x7ffc0000
[  240.991883][   T29] audit: type=1326 audit(1763511817.337:12600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  241.015353][   T29] audit: type=1326 audit(1763511817.337:12601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67e8db6567 code=0x7ffc0000
[  241.135072][T12248] FAULT_INJECTION: forcing a failure.
[  241.135072][T12248] name failslab, interval 1, probability 0, space 0, times 0
[  241.147852][T12248] CPU: 1 UID: 0 PID: 12248 Comm: GPL Not tainted syzkaller #0 PREEMPT(voluntary) 
[  241.147878][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  241.147891][T12248] Call Trace:
[  241.147897][T12248]  <TASK>
[  241.147904][T12248]  __dump_stack+0x1d/0x30
[  241.147925][T12248]  dump_stack_lvl+0xe8/0x140
[  241.147944][T12248]  dump_stack+0x15/0x1b
[  241.148017][T12248]  should_fail_ex+0x265/0x280
[  241.148057][T12248]  should_failslab+0x8c/0xb0
[  241.148079][T12248]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  241.148140][T12248]  ? __alloc_skb+0x101/0x320
[  241.148205][T12248]  __alloc_skb+0x101/0x320
[  241.148228][T12248]  ? audit_log_start+0x342/0x720
[  241.148249][T12248]  audit_log_start+0x3a0/0x720
[  241.148269][T12248]  ? kstrtouint+0x76/0xc0
[  241.148352][T12248]  audit_seccomp+0x48/0x100
[  241.148379][T12248]  ? __seccomp_filter+0x82d/0x1250
[  241.148403][T12248]  __seccomp_filter+0x83e/0x1250
[  241.148431][T12248]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  241.148477][T12248]  ? vfs_write+0x7e8/0x960
[  241.148528][T12248]  __secure_computing+0x82/0x150
[  241.148549][T12248]  syscall_trace_enter+0xcf/0x1e0
[  241.148588][T12248]  do_syscall_64+0xac/0x200
[  241.148605][T12248]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  241.148626][T12248]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  241.148651][T12248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.148692][T12248] RIP: 0033:0x7f352f44f6c9
[  241.148704][T12248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.148718][T12248] RSP: 002b:00007f352deaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d
[  241.148811][T12248] RAX: ffffffffffffffda RBX: 00007f352f6a5fa0 RCX: 00007f352f44f6c9
[  241.148821][T12248] RDX: 0000000000000024 RSI: 0000200000000000 RDI: ffffffffffffffff
[  241.148831][T12248] RBP: 00007f352deaf090 R08: 0000000000000000 R09: 0000000000000000
[  241.148841][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.148851][T12248] R13: 00007f352f6a6038 R14: 00007f352f6a5fa0 R15: 00007fff65f38688
[  241.148866][T12248]  </TASK>
[  241.591597][T12267] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  241.817008][T12278] block device autoloading is deprecated and will be removed.
[  241.856468][T12291] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2817'.
[  241.868948][T12292] x_tables: duplicate underflow at hook 3
[  242.064602][T12305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2823'.
[  242.083703][T12307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2824'.
[  242.092922][T12309] netlink: 'syz.0.2825': attribute type 29 has an invalid length.
[  242.100800][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'.
[  242.130299][T12312] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001
[  242.143356][ T4023] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.159522][ T4023] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.176314][ T4023] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.188250][T12315] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  242.202423][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2829'.
[  242.210807][T12315] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  242.219054][ T4023] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.597071][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a0e3a00: rx timeout, send abort
[  242.605298][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a0e3000: rx timeout, send abort
[  242.613549][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a0e3a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  242.627834][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a0e3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  242.772174][T12347] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  243.139432][T12365] wg1 speed is unknown, defaulting to 1000
[  243.145613][T12365] lo speed is unknown, defaulting to 1000
[  243.364890][T12360] wg1 speed is unknown, defaulting to 1000
[  243.492438][   T31] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  243.513128][   T31] bond0 (unregistering): Released all slaves
[  243.570641][T12360] lo speed is unknown, defaulting to 1000
[  243.636388][   T31] tipc: Disabling bearer <udp:syz2>
[  243.641648][   T31] tipc: Left network mode
[  243.774889][   T31] hsr_slave_0: left promiscuous mode
[  243.800392][   T31] hsr_slave_1: left promiscuous mode
[  243.822109][T12413] siw: device registration error -23
[  243.923609][T12360] chnl_net:caif_netlink_parms(): no params data found
[  244.005152][T12360] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.012269][T12360] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.019514][T12360] bridge_slave_0: entered allmulticast mode
[  244.026252][T12360] bridge_slave_0: entered promiscuous mode
[  244.033137][T12360] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.040225][T12360] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.047922][T12360] bridge_slave_1: entered allmulticast mode
[  244.064677][T12360] bridge_slave_1: entered promiscuous mode
[  244.082511][T12360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.092816][T12360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.140695][T12360] team0: Port device team_slave_0 added
[  244.159511][T12360] team0: Port device team_slave_1 added
[  244.194828][T12360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.201905][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.227797][T12360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.239987][T12360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.247007][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.273007][T12360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.316311][T12440] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  244.322852][T12440] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  244.330299][T12440] vhci_hcd vhci_hcd.0: Device attached
[  244.345727][T12360] hsr_slave_0: entered promiscuous mode
[  244.351518][T12440] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  244.351863][T12360] hsr_slave_1: entered promiscuous mode
[  244.358018][T12440] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  244.364285][T12360] debugfs: 'hsr0' already exists in 'hsr'
[  244.371263][T12440] vhci_hcd vhci_hcd.0: Device attached
[  244.376905][T12360] Cannot create hsr debugfs directory
[  244.406954][T12440] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7)
[  244.413486][T12440] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  244.420981][T12440] vhci_hcd vhci_hcd.0: Device attached
[  244.447185][T12440] can0: slcan on ttyS3.
[  244.490936][T12440] can0 (unregistered): slcan off ttyS3.
[  244.507527][T12453] vhci_hcd: connection closed
[  244.507527][T12441] vhci_hcd: connection closed
[  244.507732][  T408] vhci_hcd: stop threads
[  244.520528][T12451] vhci_hcd: connection closed
[  244.521198][  T408] vhci_hcd: release socket
[  244.521212][  T408] vhci_hcd: disconnect device
[  244.521583][   T36] vhci_hcd: vhci_device speed not set
[  244.525250][  T408] vhci_hcd: stop threads
[  244.545136][  T408] vhci_hcd: release socket
[  244.549543][  T408] vhci_hcd: disconnect device
[  244.557713][  T408] vhci_hcd: stop threads
[  244.561990][  T408] vhci_hcd: release socket
[  244.566418][  T408] vhci_hcd: disconnect device
[  244.582420][   T36] usb 5-1: new full-speed USB device number 2 using vhci_hcd
[  244.589821][   T36] usb 5-1: enqueue for inactive port 0
[  244.602432][   T36] usb 5-1: enqueue for inactive port 0
[  244.610537][   T36] usb 5-1: enqueue for inactive port 0
[  244.707831][T12486] __nla_validate_parse: 4 callbacks suppressed
[  244.707846][T12486] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2872'.
[  244.801262][   T36] vhci_hcd: vhci_device speed not set
[  244.827056][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2875'.
[  244.948618][T12360] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  244.961709][T12360] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  244.974986][T12360] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  244.992997][T12360] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  245.048981][T12539] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2876'.
[  245.068762][T12539] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2876'.
[  245.074783][T12360] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.104255][T12360] 8021q: adding VLAN 0 to HW filter on device team0
[  245.116090][  T408] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.123357][  T408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.133561][ T4020] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.140623][ T4020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.195888][T12549] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  245.254060][T12360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.343876][T12360] veth0_vlan: entered promiscuous mode
[  245.358285][T12360] veth1_vlan: entered promiscuous mode
[  245.375172][T12360] veth0_macvtap: entered promiscuous mode
[  245.382520][T12360] veth1_macvtap: entered promiscuous mode
[  245.394294][T12360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.408768][T12360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.423304][   T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.484977][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.494538][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.503895][   T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.513169][T12572] siw: device registration error -23
[  245.695948][T12591] lo speed is unknown, defaulting to 1000
[  245.719873][T12593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2891'.
[  245.839424][T12600] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2892'.
[  245.881135][   T29] kauditd_printk_skb: 505 callbacks suppressed
[  245.881147][   T29] audit: type=1326 audit(1763511822.367:13105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  245.933273][   T29] audit: type=1326 audit(1763511822.397:13106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  245.956924][   T29] audit: type=1326 audit(1763511822.397:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  245.980460][   T29] audit: type=1326 audit(1763511822.397:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  246.004014][   T29] audit: type=1326 audit(1763511822.397:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  246.027508][   T29] audit: type=1326 audit(1763511822.397:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  246.051089][   T29] audit: type=1326 audit(1763511822.397:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  246.074701][   T29] audit: type=1326 audit(1763511822.397:13112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  246.098539][   T29] audit: type=1326 audit(1763511822.397:13113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  246.122035][   T29] audit: type=1326 audit(1763511822.397:13114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  246.217182][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'.
[  246.418439][T12619] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.492735][T12619] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.510401][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  246.510652][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  246.563302][T12619] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.632211][T12619] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.729697][  T408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.744109][ T4023] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.755849][  T408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.768069][ T4020] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.063783][T12647] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2914'.
[  247.085496][T12648] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  247.098930][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2912'.
[  247.140365][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'.
[  247.276156][T12657] 9pnet_fd: Insufficient options for proto=fd
[  247.304537][T12661] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  247.373393][T12668] xt_hashlimit: max too large, truncated to 1048576
[  247.399020][ T4020] Bluetooth: hci0: Frame reassembly failed (-84)
[  247.451733][T12672] loop1: detected capacity change from 0 to 736
[  247.500918][   T23] usb usb6-port1: attempt power cycle
[  247.566138][T12686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.577516][T12686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.272653][T12703] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.322137][T12703] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.381979][T12703] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.517606][T12703] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.581837][T12712] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  248.629264][T12715] ALSA: seq fatal error: cannot create timer (-19)
[  248.651639][  T408] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.675166][   T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.698143][   T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.710464][   T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.892985][T12725] 9pnet_fd: Insufficient options for proto=fd
[  248.991825][T12732] loop1: detected capacity change from 0 to 736
[  249.058372][   T31] Bluetooth: hci1: Frame reassembly failed (-84)
[  249.330621][   T23] usb usb6-port1: unable to enumerate USB device
[  249.470345][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  249.470406][ T3499] Bluetooth: hci0: command 0x1003 tx timeout
[  249.862645][T12757] ip6t_srh: unknown srh match flags  4000
[  249.881093][T12757] __nla_validate_parse: 16 callbacks suppressed
[  249.881104][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2955'.
[  249.900719][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2955'.
[  250.154632][T12784] loop1: detected capacity change from 0 to 2048
[  250.732586][T12783] lo speed is unknown, defaulting to 1000
[  250.925330][T12786] lo speed is unknown, defaulting to 1000
[  251.074847][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  251.094348][   T29] kauditd_printk_skb: 1013 callbacks suppressed
[  251.094364][   T29] audit: type=1326 audit(1763511827.577:14128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.124599][   T29] audit: type=1326 audit(1763511827.577:14129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.148650][   T29] audit: type=1326 audit(1763511827.587:14130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.172205][   T29] audit: type=1326 audit(1763511827.587:14131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.195866][   T29] audit: type=1326 audit(1763511827.587:14132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.219503][   T29] audit: type=1326 audit(1763511827.587:14133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.243061][   T29] audit: type=1326 audit(1763511827.587:14134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.266637][   T29] audit: type=1326 audit(1763511827.587:14135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.290337][   T29] audit: type=1326 audit(1763511827.587:14136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.314003][   T29] audit: type=1326 audit(1763511827.587:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.2.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f27f6c9 code=0x7ffc0000
[  251.340150][T12784] Alternate GPT is invalid, using primary GPT.
[  251.346615][T12784]  loop1: p2 p3 p7
[  251.399922][T12182] udevd[12182]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  251.410624][T11953] udevd[11953]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  251.432686][T12182] udevd[12182]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  251.528660][T12802] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2973'.
[  251.744453][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2976'.
[  252.003910][T12822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2979'.
[  252.017382][T12822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2979'.
[  252.138457][T12826] xt_hashlimit: max too large, truncated to 1048576
[  252.657247][T12843] lo speed is unknown, defaulting to 1000
[  253.277889][T12861] lo speed is unknown, defaulting to 1000
[  254.062297][T12881] sch_fq: defrate 4294967295 ignored.
[  254.120244][T12887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3003'.
[  254.120665][T12885] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3004'.
[  254.129392][T12887] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3003'.
[  254.171217][T12887] xt_hashlimit: max too large, truncated to 1048576
[  254.755670][T12913] lo speed is unknown, defaulting to 1000
[  254.855126][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'.
[  254.905147][T12901] lo speed is unknown, defaulting to 1000
[  254.911258][T12919] __nla_validate_parse: 2 callbacks suppressed
[  254.911270][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3013'.
[  254.980584][T12901] chnl_net:caif_netlink_parms(): no params data found
[  255.064517][T12901] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.071614][T12901] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.098888][T12901] bridge_slave_0: entered allmulticast mode
[  255.190995][T12901] bridge_slave_0: entered promiscuous mode
[  255.200140][T12901] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.207230][T12901] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.216957][T12901] bridge_slave_1: entered allmulticast mode
[  255.223580][T12901] bridge_slave_1: entered promiscuous mode
[  255.242133][T12939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3019'.
[  255.253802][T12940] loop1: detected capacity change from 0 to 128
[  255.263815][T12939] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3019'.
[  255.286043][   T31] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.304166][T12901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.314663][T12901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.326513][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3018'.
[  255.369801][   T31] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.394190][T12901] team0: Port device team_slave_0 added
[  255.403124][T12901] team0: Port device team_slave_1 added
[  255.404727][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3021'.
[  255.418542][T12946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3021'.
[  255.420748][T12947] xt_hashlimit: max too large, truncated to 1048576
[  255.441224][   T31] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.452909][T12901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.459999][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  255.486080][T12901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.497609][T12901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.504642][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  255.530601][T12901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.557242][T12901] hsr_slave_0: entered promiscuous mode
[  255.563504][T12901] hsr_slave_1: entered promiscuous mode
[  255.569359][T12901] debugfs: 'hsr0' already exists in 'hsr'
[  255.575115][T12901] Cannot create hsr debugfs directory
[  255.581368][   T31] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.591608][T12951] xt_hashlimit: max too large, truncated to 1048576
[  255.711721][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  255.717812][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  255.862062][   T31] bond0 (unregistering): Released all slaves
[  255.906166][   T31] hsr_slave_0: left promiscuous mode
[  255.911953][   T31] hsr_slave_1: left promiscuous mode
[  255.920760][   T31] veth1_macvtap: left promiscuous mode
[  255.926364][   T31] veth0_macvtap: left promiscuous mode
[  255.932284][   T31] veth1_vlan: left promiscuous mode
[  255.937606][   T31] veth0_vlan: left promiscuous mode
[  255.976179][   T31] pim6reg (unregistering): left allmulticast mode
[  256.227638][T12901] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  256.247262][T12901] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  256.263707][T12901] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  256.279205][T12901] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  256.326420][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'.
[  256.329703][T12901] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.348109][T12901] 8021q: adding VLAN 0 to HW filter on device team0
[  256.353935][T13032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.364300][T13032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.373909][  T408] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.380971][  T408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.391679][  T408] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.398784][  T408] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.433791][T13035] siw: device registration error -23
[  256.490933][T12901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.516611][T13046] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3031'.
[  256.586975][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'.
[  256.595921][T13055] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3031'.
[  256.634372][T12901] veth0_vlan: entered promiscuous mode
[  256.642052][T12901] veth1_vlan: entered promiscuous mode
[  256.656416][T12901] veth0_macvtap: entered promiscuous mode
[  256.663284][T12901] veth1_macvtap: entered promiscuous mode
[  256.673913][T12901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.684842][T12901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.696047][ T4018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.705452][ T4018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.714557][ T4018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.725520][ T4018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.863356][T13068] siw: device registration error -23
[  257.108427][T13070] lo speed is unknown, defaulting to 1000
[  257.131312][T13086] xt_hashlimit: max too large, truncated to 1048576
[  257.176335][T13070] chnl_net:caif_netlink_parms(): no params data found
[  257.220873][T13070] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.227944][T13070] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.235345][T13070] bridge_slave_0: entered allmulticast mode
[  257.241999][T13070] bridge_slave_0: entered promiscuous mode
[  257.251730][T13070] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.258841][T13070] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.266000][T13070] bridge_slave_1: entered allmulticast mode
[  257.272367][T13070] bridge_slave_1: entered promiscuous mode
[  257.288724][T13070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.298914][T13070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.317363][T13070] team0: Port device team_slave_0 added
[  257.323987][T13070] team0: Port device team_slave_1 added
[  257.338688][T13070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.345738][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.371661][T13070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.382809][T13070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.389792][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.415816][T13070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.441237][T13070] hsr_slave_0: entered promiscuous mode
[  257.447311][T13070] hsr_slave_1: entered promiscuous mode
[  257.453115][T13070] debugfs: 'hsr0' already exists in 'hsr'
[  257.458821][T13070] Cannot create hsr debugfs directory
[  257.465745][   T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.521768][   T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.581792][   T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.635221][   T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.892153][   T12] bond0 (unregistering): (slave bond1): Releasing backup interface
[  257.900628][   T12] bond0 (unregistering): Released all slaves
[  257.908782][   T12] bond1 (unregistering): Released all slaves
[  257.917314][T12568] infiniband syb2: ib_query_port failed (-19)
[  257.953518][   T12] tipc: Left network mode
[  257.960789][   T12] hsr_slave_0: left promiscuous mode
[  257.966344][   T12] hsr_slave_1: left promiscuous mode
[  257.974437][   T12] veth1_macvtap: left promiscuous mode
[  257.979892][   T12] veth0_macvtap: left promiscuous mode
[  257.985590][   T12] veth1_vlan: left promiscuous mode
[  257.990938][   T12] veth0_vlan: left promiscuous mode
[  258.028070][   T12] pim6reg (unregistering): left allmulticast mode
[  258.316042][T13070] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  258.324785][T13070] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  258.333433][T13070] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  258.342350][T13070] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  258.376991][T13070] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.390860][T13070] 8021q: adding VLAN 0 to HW filter on device team0
[  258.402361][ T4017] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.409528][ T4017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.422877][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.429967][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.510255][T13070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.520073][   T29] kauditd_printk_skb: 372 callbacks suppressed
[  258.520153][   T29] audit: type=1326 audit(1763511834.997:14510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.557658][   T29] audit: type=1326 audit(1763511835.017:14511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.581313][   T29] audit: type=1326 audit(1763511835.017:14512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.604892][   T29] audit: type=1326 audit(1763511835.017:14513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.606419][T13070] veth0_vlan: entered promiscuous mode
[  258.628658][   T29] audit: type=1326 audit(1763511835.017:14514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.639967][T13070] veth1_vlan: entered promiscuous mode
[  258.657616][   T29] audit: type=1326 audit(1763511835.017:14515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.676645][T13070] veth0_macvtap: entered promiscuous mode
[  258.686573][   T29] audit: type=1326 audit(1763511835.017:14516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.715788][   T29] audit: type=1326 audit(1763511835.017:14517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.718837][T13070] veth1_macvtap: entered promiscuous mode
[  258.739341][   T29] audit: type=1326 audit(1763511835.017:14518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.751149][T13070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.768577][   T29] audit: type=1326 audit(1763511835.017:14519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13118 comm="syz.0.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f67e8dbf6c9 code=0x7ffc0000
[  258.802311][T13070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.813274][ T4017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.813500][T13127] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  258.822668][ T4017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.841967][ T4017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.854954][ T4017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.898319][T13132] bridge0: entered allmulticast mode
[  259.070325][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  259.076725][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  259.699020][T13169] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  259.718274][T13169] 0ªî{X¹¦: entered allmulticast mode
[  259.731359][T13169] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  259.748119][T13166] xt_hashlimit: max too large, truncated to 1048576
[  259.932229][T13182] __nla_validate_parse: 10 callbacks suppressed
[  259.932245][T13182] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3052'.
[  260.011122][T13186] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  260.014933][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3052'.
[  260.028358][T13182] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3052'.
[  260.037499][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3052'.
[  260.046440][T13182] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3052'.
[  260.055746][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3052'.
[  260.177250][T13191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3056'.
[  260.186875][T13191] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3056'.
[  260.210994][T13191] xt_hashlimit: max too large, truncated to 1048576
[  260.232268][T13195] ip6t_srh: unknown srh match flags  4000
[  260.247815][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'.
[  260.275723][T13197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3058'.
[  260.349857][T13200] xt_hashlimit: max too large, truncated to 1048576
[  260.426592][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b965e00: rx timeout, send abort
[  260.434849][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b964c00: rx timeout, send abort
[  260.443157][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b965e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  260.457455][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b964c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  260.562358][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.572334][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.761684][T13220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13220 comm=syz.1.3065
[  260.970039][T13220] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  261.851287][T13259] lo speed is unknown, defaulting to 1000
[  262.141190][T13270] xt_TCPMSS: Only works on TCP SYN packets
[  262.664972][T13285] loop1: detected capacity change from 0 to 736
[  262.752510][T13293] loop1: detected capacity change from 0 to 128
[  262.915729][T13296] lo speed is unknown, defaulting to 1000
[  263.302072][   T12] bond0 (unregistering): Released all slaves
[  263.329546][   T12] bond1 (unregistering): Released all slaves
[  263.355540][T13296] chnl_net:caif_netlink_parms(): no params data found
[  263.431745][   T12] hsr_slave_0: left promiscuous mode
[  263.448550][   T12] hsr_slave_1: left promiscuous mode
[  263.472743][   T12] pim6reg (unregistering): left allmulticast mode
[  263.581572][   T29] kauditd_printk_skb: 494 callbacks suppressed
[  263.581587][   T29] audit: type=1326 audit(1763511840.037:15014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.611475][   T29] audit: type=1326 audit(1763511840.037:15015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.635057][   T29] audit: type=1326 audit(1763511840.037:15016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.658820][   T29] audit: type=1326 audit(1763511840.037:15017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.682494][   T29] audit: type=1326 audit(1763511840.037:15018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.706088][   T29] audit: type=1326 audit(1763511840.037:15019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.729614][   T29] audit: type=1326 audit(1763511840.037:15020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.753260][   T29] audit: type=1326 audit(1763511840.037:15021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.776942][   T29] audit: type=1326 audit(1763511840.037:15022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.800690][   T29] audit: type=1326 audit(1763511840.037:15023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f352f44f6c9 code=0x7ffc0000
[  263.867224][T13296] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.874521][T13296] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.889826][T13296] bridge_slave_0: entered allmulticast mode
[  263.896562][T13296] bridge_slave_0: entered promiscuous mode
[  263.910152][T13328] lo speed is unknown, defaulting to 1000
[  263.910343][T13296] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.922952][T13296] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.931040][T13296] bridge_slave_1: entered allmulticast mode
[  263.937464][T13296] bridge_slave_1: entered promiscuous mode
[  263.963106][T13296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.982665][T13296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.037845][T13296] team0: Port device team_slave_0 added
[  264.046803][T13296] team0: Port device team_slave_1 added
[  264.116385][T13296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.123453][T13296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.149379][T13296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.172124][T13296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.179107][T13296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.205100][T13296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.247325][T13296] hsr_slave_0: entered promiscuous mode
[  264.259164][T13296] hsr_slave_1: entered promiscuous mode
[  264.267720][T13296] debugfs: 'hsr0' already exists in 'hsr'
[  264.273601][T13296] Cannot create hsr debugfs directory
[  264.560965][T13412] xt_hashlimit: max too large, truncated to 1048576
[  264.637865][T13296] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  264.655045][T13296] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  264.665312][T13296] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  264.681960][T13296] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  264.734355][T13296] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.749786][T13296] 8021q: adding VLAN 0 to HW filter on device team0
[  264.762367][ T4018] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.769442][ T4018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.796808][ T4018] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.803892][ T4018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.885673][T13296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.925800][T13475] lo speed is unknown, defaulting to 1000
[  265.219814][T13296] veth0_vlan: entered promiscuous mode
[  265.241976][T13487] __nla_validate_parse: 33 callbacks suppressed
[  265.241992][T13487] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3124'.
[  265.261531][T13296] veth1_vlan: entered promiscuous mode
[  265.283404][T13296] veth0_macvtap: entered promiscuous mode
[  265.295950][T13296] veth1_macvtap: entered promiscuous mode
[  265.309192][T13296] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.323656][T13296] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.335988][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.354066][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3124'.
[  265.363107][T13488] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3124'.
[  265.372239][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3124'.
[  265.381160][T13488] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3124'.
[  265.391718][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3124'.
[  265.394765][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.409770][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.424404][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.771649][T13509] loop1: detected capacity change from 0 to 164
[  265.781001][T13509] iso9660: Unknown parameter 'net/anycast6'
[  265.800359][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  265.918974][T13518] lo speed is unknown, defaulting to 1000
[  266.260796][T13526] ip6t_srh: unknown srh match flags  4000
[  266.277846][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3138'.
[  266.287305][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3138'.
[  266.362950][T13534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.469206][T13534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.519597][T13542] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  266.540204][T13534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.554082][T13539] sch_fq: defrate 0 ignored.
[  266.613268][T13534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.745616][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.780220][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.799611][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.817080][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.842212][T13564] loop1: detected capacity change from 0 to 2048
[  266.850127][T13565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.873989][T13565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.965091][T13569] lo speed is unknown, defaulting to 1000
[  267.593905][T13564] Alternate GPT is invalid, using primary GPT.
[  267.600388][T13564]  loop1: p2 p3 p7
[  267.662671][ T3004] Alternate GPT is invalid, using primary GPT.
[  267.669039][ T3004]  loop1: p2 p3 p7
[  267.682885][T13576] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  267.808013][T11954] udevd[11954]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  267.834782][T12182] udevd[12182]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  267.864800][T11953] udevd[11953]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  267.890048][T13585] lo speed is unknown, defaulting to 1000
[  268.555436][T11953] udevd[11953]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  268.566112][T12182] udevd[12182]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  268.570411][T13587] udevd[13587]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  268.617546][T13592] vhci_hcd: invalid port number 23
[  268.648177][T13597] lo speed is unknown, defaulting to 1000
[  268.676867][   T29] kauditd_printk_skb: 251 callbacks suppressed
[  268.676900][   T29] audit: type=1400 audit(1763511845.157:15275): avc:  denied  { lock } for  pid=13595 comm="syz.5.3162" path="socket:[45649]" dev="sockfs" ino=45649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  268.718287][   T29] audit: type=1326 audit(1763511845.197:15276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  268.718348][   T29] audit: type=1326 audit(1763511845.197:15277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  268.718380][   T29] audit: type=1326 audit(1763511845.197:15278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  268.718406][   T29] audit: type=1326 audit(1763511845.197:15279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  268.718444][   T29] audit: type=1326 audit(1763511845.197:15280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  268.718518][   T29] audit: type=1326 audit(1763511845.197:15281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  268.718544][   T29] audit: type=1326 audit(1763511845.197:15282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  268.718644][   T29] audit: type=1326 audit(1763511845.197:15283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  268.718668][   T29] audit: type=1326 audit(1763511845.197:15284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd7ccf6c9 code=0x7ffc0000
[  269.162061][T13608] lo speed is unknown, defaulting to 1000
[  269.416563][T13611] ip6t_srh: unknown srh match flags  4000
[  269.459821][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3166'.
[  269.827272][T13616] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.932243][T13616] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.055489][T13616] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.142473][T13616] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.153062][T13625] infiniband syû: set active
[  270.157683][T13625] infiniband syû: added bond_slave_0
[  270.188510][T13625] RDS/IB: syû: added
[  270.193199][T13625] smc: adding ib device syû with port count 1
[  270.206623][T13625] smc:    ib device syû port 1 has no pnetid
[  270.274226][ T4023] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.368115][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'.
[  270.414548][ T4023] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.423201][ T4023] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.447757][ T4023] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.448542][T13635] 9pnet_fd: Insufficient options for proto=fd
[  270.498661][T13642] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3178'.
[  270.545140][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.554759][  T408] Bluetooth: hci0: Frame reassembly failed (-84)
[  270.563067][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.580627][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'.
[  270.589655][T13651] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3178'.
[  270.598901][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'.
[  270.608062][T13651] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3178'.
[  270.620899][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'.
[  270.632045][T13654] sch_fq: defrate 4294967295 ignored.
[  270.762263][T13660] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3184'.
[  270.824932][T13661] ==================================================================
[  270.833015][T13661] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event
[  270.841780][T13661] 
[  270.844083][T13661] write to 0xffff88811c0c2904 of 4 bytes by task 13660 on cpu 1:
[  270.851772][T13661]  fsnotify_detach_mark+0xba/0x160
[  270.856862][T13661]  fsnotify_clear_marks_by_group+0x2f9/0x4b0
[  270.862825][T13661]  fsnotify_destroy_group+0x53/0x180
[  270.868101][T13661]  inotify_release+0x1f/0x30
[  270.872670][T13661]  __fput+0x29b/0x650
[  270.876627][T13661]  ____fput+0x1c/0x30
[  270.880586][T13661]  task_work_run+0x131/0x1a0
[  270.885155][T13661]  exit_to_user_mode_loop+0xed/0x110
[  270.890417][T13661]  do_syscall_64+0x1d6/0x200
[  270.894983][T13661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.900851][T13661] 
[  270.903160][T13661] read to 0xffff88811c0c2904 of 4 bytes by task 13661 on cpu 0:
[  270.910771][T13661]  inotify_handle_inode_event+0x34e/0x3d0
[  270.916475][T13661]  fsnotify_handle_inode_event+0x1c0/0x220
[  270.922259][T13661]  fsnotify+0x1296/0x14b0
[  270.926570][T13661]  __fsnotify_parent+0x29e/0x330
[  270.929806][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'.
[  270.931512][T13661]  vfs_open+0x19c/0x1e0
[  270.931531][T13661]  path_openat+0x1c5e/0x2170
[  270.931551][T13661]  do_filp_open+0x109/0x230
[  270.940427][T13663] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3184'.
[  270.944509][T13661]  do_sys_openat2+0xa6/0x110
[  270.967116][T13661]  __x64_sys_open+0xe6/0x110
[  270.971702][T13661]  x64_sys_call+0x1457/0x3000
[  270.976366][T13661]  do_syscall_64+0xd2/0x200
[  270.980853][T13661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.986729][T13661] 
[  270.989033][T13661] value changed: 0x00000033 -> 0x00000030
[  270.994727][T13661] 
[  270.997033][T13661] Reported by Kernel Concurrency Sanitizer on:
[  271.003165][T13661] CPU: 0 UID: 0 PID: 13661 Comm: syz.1.3184 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  271.012955][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  271.023000][T13661] ==================================================================
[  272.590365][ T3581] Bluetooth: hci0: command 0x1003 tx timeout
[  272.596394][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110