last executing test programs:

2m35.674912916s ago: executing program 32 (id=844):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
getpgid(0x0)

2m15.574530498s ago: executing program 33 (id=1758):
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
lseek(r0, 0x2000, 0x0)

1m46.212988289s ago: executing program 6 (id=2868):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)

1m45.94984234s ago: executing program 6 (id=2876):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x22}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000500)='system_u:object_r:random_device_t:s0\x00', 0x25, 0x3)

1m45.927517662s ago: executing program 34 (id=2876):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x22}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000500)='system_u:object_r:random_device_t:s0\x00', 0x25, 0x3)

1m39.999410341s ago: executing program 35 (id=3085):
creat(&(0x7f0000000200)='./file0\x00', 0x64)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000600000000000000000000004479de600000000000c51a0000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, 0x0, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
listen(r8, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffebd)
connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r10, @ANYRES64=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7}, 0x18)

1m8.392163263s ago: executing program 36 (id=4207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)

31.357216989s ago: executing program 37 (id=5506):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e3000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)

16.433077504s ago: executing program 0 (id=5952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000000000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

16.359754399s ago: executing program 0 (id=5955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00c88c3171104300000000009500020000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

16.35940383s ago: executing program 0 (id=5957):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b00)='task_newtask\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

16.310121113s ago: executing program 0 (id=5968):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0)

16.269813377s ago: executing program 0 (id=5960):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

16.220893911s ago: executing program 0 (id=5963):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0d02, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)='\x00!', 0x2}], 0x1, 0x73a, 0x1)

16.191996843s ago: executing program 38 (id=5963):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0d02, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)='\x00!', 0x2}], 0x1, 0x73a, 0x1)

14.030748677s ago: executing program 9 (id=6038):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0)

13.990818181s ago: executing program 9 (id=6040):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4051)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000002280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a)

13.953733364s ago: executing program 9 (id=6044):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x4, 0x80000001})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d7, 0x1101, 0xff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6})

13.918305566s ago: executing program 9 (id=6047):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0)

13.8678999s ago: executing program 9 (id=6050):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
tkill(r2, 0x1b)

13.796892777s ago: executing program 9 (id=6052):
creat(&(0x7f0000000200)='./file0\x00', 0x64)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000600000000000000000000004479de600000000000c51a0000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07f30000000000000000020000000c00018008000300ac1407aa9401bf2c6daeee9a1c97cf9bbc47c15b5aa137516c5eb6c2b4d12e04c36fdd6524e47238388bbcb32f5e673225f8d8c2cead539a74f13222731739ffd8f650af031887fdff72af459b17a83ebdf3e58dda988db9c710d0e5917931c57db2df1c811ff7fc88921a3718f99116d72b99b173883fe26776518e4187b8e8319134468a2ab9988c2a0ca98ac9f678262701091f23162fbbf3e76c89f0b6eb89c0f6753db9e005749134829457"], 0x20}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
listen(r9, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffebd)
connect$unix(r8, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r11, @ANYRES64=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7}, 0x18)

13.74790211s ago: executing program 39 (id=6052):
creat(&(0x7f0000000200)='./file0\x00', 0x64)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000600000000000000000000004479de600000000000c51a0000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07f30000000000000000020000000c00018008000300ac1407aa9401bf2c6daeee9a1c97cf9bbc47c15b5aa137516c5eb6c2b4d12e04c36fdd6524e47238388bbcb32f5e673225f8d8c2cead539a74f13222731739ffd8f650af031887fdff72af459b17a83ebdf3e58dda988db9c710d0e5917931c57db2df1c811ff7fc88921a3718f99116d72b99b173883fe26776518e4187b8e8319134468a2ab9988c2a0ca98ac9f678262701091f23162fbbf3e76c89f0b6eb89c0f6753db9e005749134829457"], 0x20}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
listen(r9, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffebd)
connect$unix(r8, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r11, @ANYRES64=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7}, 0x18)

11.065204167s ago: executing program 6 (id=6055):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14)

11.046705568s ago: executing program 6 (id=6120):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x200000, 0x27)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1)

11.020415091s ago: executing program 6 (id=6122):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
socket$inet(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

11.006236802s ago: executing program 3 (id=6123):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2(0x0, 0x80000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), 0x0}, 0x20)

10.988637533s ago: executing program 3 (id=6124):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008000)

10.569760597s ago: executing program 3 (id=6131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe2(0x0, 0x800)
open(0x0, 0x108843, 0x190)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '6k\x00', 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

10.548701208s ago: executing program 3 (id=6133):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x200000, 0x27)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1)

10.507117522s ago: executing program 3 (id=6134):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

9.807990709s ago: executing program 4 (id=6154):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x16, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0)

9.807362328s ago: executing program 4 (id=6155):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f0000000300)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfff, 0x0, 0x0, 0x0})

9.78604637s ago: executing program 4 (id=6156):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

9.765561492s ago: executing program 4 (id=6157):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

9.747684673s ago: executing program 4 (id=6159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
sendmmsg$inet(r2, &(0x7f00000004c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001440)="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", 0xbc1}], 0x1}}], 0x2, 0x40080c0)

9.438233568s ago: executing program 4 (id=6167):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

9.438050459s ago: executing program 40 (id=6167):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

9.30456373s ago: executing program 3 (id=6172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
syz_emit_ethernet(0x66, &(0x7f0000000440)={@random="8b44c1531c44", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

9.255684203s ago: executing program 41 (id=6172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
syz_emit_ethernet(0x66, &(0x7f0000000440)={@random="8b44c1531c44", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

8.879290993s ago: executing program 6 (id=6181):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14)

8.875923704s ago: executing program 42 (id=6181):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14)

2.179885594s ago: executing program 5 (id=6308):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.160220606s ago: executing program 5 (id=6310):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000300), 0x101540)
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8c81, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x800000, 0x3, 0x9, 0x40000003, 0x2000000000, 0x80, 0xe}, 0x0, &(0x7f0000000240)={0x3ff, 0x7e7, 0x0, 0xfffffffffffffff9, 0x4, 0x0, 0x7fffffff, 0x8}, 0x0, 0x0)

1.406181197s ago: executing program 8 (id=6337):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x628, 0xc88d, 0x43, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x3000046, &(0x7f0000000240)={[{@delalloc}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@data_journal}, {@data_err_ignore}, {@dax_never}, {@oldalloc}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1e}}, {@user_xattr}, {@nobh}, {@resuid}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8)

1.350709361s ago: executing program 8 (id=6338):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.302715535s ago: executing program 5 (id=6342):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r0, 0x65, 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
read(r2, &(0x7f0000032440)=""/102364, 0x18fdc)

1.181278665s ago: executing program 1 (id=6344):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
creat(0x0, 0xd931d3864d39dcca)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0x4, "c045"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{}, {@empty}, {@local}, {@private}, {@multicast2, 0x9}]}]}}}}}}}, 0x0)

1.162293497s ago: executing program 1 (id=6345):
setfsgid(0xee00)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}], 0x1c)
fchdir(r0)
mount(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000040)='stack\x00')
pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)

479.981991ms ago: executing program 2 (id=6356):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0)

448.704954ms ago: executing program 7 (id=6357):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0)
r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$nci(r2, 0x0, 0x4)

448.521934ms ago: executing program 8 (id=6358):
r0 = socket$key(0xf, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x4}, 0x18)
sendfile(r0, r2, 0x0, 0x400000016)

448.112294ms ago: executing program 2 (id=6359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
close(r2)

439.908875ms ago: executing program 5 (id=6360):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b12050200000000240012800b00010069703667726500001400028008000100", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}}], 0x1, 0x8000004)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0)

405.418028ms ago: executing program 7 (id=6361):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

355.234282ms ago: executing program 8 (id=6362):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

354.980712ms ago: executing program 2 (id=6363):
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000200)='system_u:object_r:bin_t:s0\x00', 0x1b, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

354.805202ms ago: executing program 5 (id=6364):
r0 = socket(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='br_fdb_add\x00', r2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)

354.570262ms ago: executing program 7 (id=6365):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0)

354.210942ms ago: executing program 8 (id=6366):
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x88882, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0)

325.455494ms ago: executing program 5 (id=6367):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

324.897364ms ago: executing program 7 (id=6368):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0)

322.293384ms ago: executing program 2 (id=6369):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x100002, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800)

298.668476ms ago: executing program 1 (id=6370):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES64=0x0], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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")
r0 = socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000d40)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)

252.15087ms ago: executing program 8 (id=6371):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)

243.962711ms ago: executing program 2 (id=6372):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
rt_sigtimedwait(&(0x7f0000001300)={[0xfffffff9]}, 0x0, 0x0, 0x8)

174.976476ms ago: executing program 7 (id=6373):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80881, 0x82)
write(r1, &(0x7f0000004200)='t', 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18)
faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1200)
sendfile(r1, r0, 0x0, 0x3ffff)

126.48041ms ago: executing program 2 (id=6374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)

126.22566ms ago: executing program 1 (id=6375):
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)

96.605502ms ago: executing program 1 (id=6376):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0)
shutdown(r1, 0x1)
splice(r1, 0x0, r0, 0x0, 0x1, 0x0)

62.867115ms ago: executing program 7 (id=6377):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/93, 0x5d}, 0x6}], 0x2, 0x100, 0x0)

0s ago: executing program 1 (id=6378):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x0, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)

kernel console output (not intermixed with test programs):

audit: type=1326 audit(2000000105.510:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.0.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8454ebe9 code=0x7ffc0000
[  158.717737][   T29] audit: type=1326 audit(2000000105.510:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.0.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd8454ebe9 code=0x7ffc0000
[  158.741247][   T29] audit: type=1326 audit(2000000105.510:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.0.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8454ebe9 code=0x7ffc0000
[  158.764767][   T29] audit: type=1326 audit(2000000105.510:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.0.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8454ebe9 code=0x7ffc0000
[  159.107350][T14124] bridge0: port 3(batadv0) entered blocking state
[  159.113851][T14124] bridge0: port 3(batadv0) entered disabled state
[  159.114167][T14125] loop9: detected capacity change from 0 to 1024
[  159.121010][T14124] batadv0: entered allmulticast mode
[  159.133053][T14124] batadv0: entered promiscuous mode
[  159.136552][T14125] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  159.149238][T14125] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  159.161367][T14125] JBD2: no valid journal superblock found
[  159.167155][T14125] EXT4-fs (loop9): Could not load journal inode
[  159.189300][T14125] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  159.244951][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4655'.
[  159.255375][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4655'.
[  159.333631][T14144] loop9: detected capacity change from 0 to 8192
[  159.435299][T14152] IPVS: stopping master sync thread 14153 ...
[  159.435317][T14153] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  159.606051][   T57] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  159.615305][   T57] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  159.654676][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4671'.
[  159.675003][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4671'.
[  159.798455][T14193] 9pnet_fd: p9_fd_create_tcp (14193): problem connecting socket to 127.0.0.1
[  159.860618][T14210] loop8: detected capacity change from 0 to 512
[  159.903675][T14210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.918088][T14210] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.945058][T10515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.994458][T14228] loop8: detected capacity change from 0 to 1024
[  160.001614][T14228] EXT4-fs: inline encryption not supported
[  160.007785][T14228] EXT4-fs: Invalid want_extra_isize 131
[  160.061219][T14241] loop1: detected capacity change from 0 to 128
[  160.077619][T14241] syz.1.4699: attempt to access beyond end of device
[  160.077619][T14241] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128
[  160.092433][T14241] syz.1.4699: attempt to access beyond end of device
[  160.092433][T14241] loop1: rw=2049, sector=146, nr_sectors = 8 limit=128
[  160.109143][T14241] syz.1.4699: attempt to access beyond end of device
[  160.109143][T14241] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128
[  160.122637][T14241] Buffer I/O error on dev loop1, logical block 76, lost async page write
[  160.151108][T14241] syz.1.4699: attempt to access beyond end of device
[  160.151108][T14241] loop1: rw=2049, sector=170, nr_sectors = 8 limit=128
[  160.168513][T14241] syz.1.4699: attempt to access beyond end of device
[  160.168513][T14241] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128
[  160.182006][T14241] Buffer I/O error on dev loop1, logical block 88, lost async page write
[  160.194431][T14241] syz.1.4699: attempt to access beyond end of device
[  160.194431][T14241] loop1: rw=2049, sector=178, nr_sectors = 8 limit=128
[  160.210137][T14241] syz.1.4699: attempt to access beyond end of device
[  160.210137][T14241] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128
[  160.223775][T14241] Buffer I/O error on dev loop1, logical block 92, lost async page write
[  160.235431][T14241] syz.1.4699: attempt to access beyond end of device
[  160.235431][T14241] loop1: rw=2049, sector=202, nr_sectors = 8 limit=128
[  160.300820][T14241] syz.1.4699: attempt to access beyond end of device
[  160.300820][T14241] loop1: rw=2049, sector=208, nr_sectors = 2 limit=128
[  160.314398][T14241] Buffer I/O error on dev loop1, logical block 104, lost async page write
[  160.346006][T14241] syz.1.4699: attempt to access beyond end of device
[  160.346006][T14241] loop1: rw=2049, sector=210, nr_sectors = 8 limit=128
[  160.370644][T14241] Buffer I/O error on dev loop1, logical block 108, lost async page write
[  160.391552][T14241] Buffer I/O error on dev loop1, logical block 120, lost async page write
[  160.400912][T14241] Buffer I/O error on dev loop1, logical block 124, lost async page write
[  160.415461][T14241] Buffer I/O error on dev loop1, logical block 80, lost async page write
[  160.434822][T14241] Buffer I/O error on dev loop1, logical block 84, lost async page write
[  160.448864][T14241] Buffer I/O error on dev loop1, logical block 112, lost async page write
[  160.586630][T14283] sch_tbf: burst 0 is lower than device lo mtu (82) !
[  160.697201][T14301] SELinux: failed to load policy
[  160.906064][T14326] loop8: detected capacity change from 0 to 2364
[  161.057968][T14353] bond0: entered promiscuous mode
[  161.063067][T14353] bond_slave_0: entered promiscuous mode
[  161.069098][T14353] bond_slave_1: entered promiscuous mode
[  161.085827][T14353] dummy0: entered promiscuous mode
[  161.094361][T14353] batadv0: entered promiscuous mode
[  161.109570][T14353] hsr1: entered allmulticast mode
[  161.114668][T14353] bond0: entered allmulticast mode
[  161.120132][T14353] bond_slave_0: entered allmulticast mode
[  161.126004][T14353] bond_slave_1: entered allmulticast mode
[  161.147941][T14353] dummy0: entered allmulticast mode
[  161.153237][T14353] batadv0: entered allmulticast mode
[  161.186935][T14353] 8021q: adding VLAN 0 to HW filter on device hsr1
[  161.214355][T14353] bond0: left promiscuous mode
[  161.219257][T14353] bond_slave_0: left promiscuous mode
[  161.224741][T14353] bond_slave_1: left promiscuous mode
[  161.249713][T14353] dummy0: left promiscuous mode
[  161.255467][T14353] batadv0: left promiscuous mode
[  161.363058][T14367] __nla_validate_parse: 3 callbacks suppressed
[  161.363074][T14367] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4755'.
[  161.414586][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4754'.
[  161.424168][T14372] netem: change failed
[  161.435035][T14376] loop8: detected capacity change from 0 to 256
[  161.504713][T14388] pim6reg: entered allmulticast mode
[  161.523989][T14388] pim6reg: left allmulticast mode
[  161.555551][T14394] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  161.712658][T14405] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4772'.
[  161.853291][T14420] tipc: Started in network mode
[  161.858330][T14420] tipc: Node identity 4, cluster identity 4711
[  161.864579][T14420] tipc: Node number set to 4
[  162.115246][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4794'.
[  162.124824][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4794'.
[  162.655522][T14500] loop9: detected capacity change from 0 to 512
[  162.662162][T14500] EXT4-fs: Ignoring removed nomblk_io_submit option
[  162.675436][T14500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.693489][T14504] netlink: 'syz.0.4817': attribute type 3 has an invalid length.
[  162.718039][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.758930][T14514] netlink: 'syz.0.4821': attribute type 1 has an invalid length.
[  162.777533][T14514] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.792269][T14516] all (unregistering): Released all slaves
[  162.810473][T14514] bond1: (slave gretap1): making interface the new active one
[  162.818937][T14514] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  162.956697][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4832'.
[  163.010498][T14547] netlink: 'syz.9.4836': attribute type 12 has an invalid length.
[  163.018418][T14547] netlink: 'syz.9.4836': attribute type 29 has an invalid length.
[  163.026297][T14547] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4836'.
[  163.088502][T14556] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4838'.
[  163.177283][   T29] kauditd_printk_skb: 165 callbacks suppressed
[  163.177297][   T29] audit: type=1400 audit(163.158:6276): avc:  denied  { firmware_load } for  pid=14562 comm="syz.8.4843" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  163.285971][T14571] loop9: detected capacity change from 0 to 128
[  163.304776][T14571] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  163.347065][T14571] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.411833][   T31] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.467581][   T29] audit: type=1400 audit(163.448:6277): avc:  denied  { getopt } for  pid=14576 comm="syz.9.4850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  163.581124][   T29] audit: type=1400 audit(163.558:6278): avc:  denied  { ioctl } for  pid=14585 comm="syz.1.4854" path="socket:[45014]" dev="sockfs" ino=45014 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  163.613914][T14594] ref_ctr_offset mismatch. inode: 0x301 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000
[  163.632783][   T29] audit: type=1326 audit(163.608:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  163.655841][   T29] audit: type=1326 audit(163.608:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  163.663845][T14601] bond0: entered promiscuous mode
[  163.678922][   T29] audit: type=1326 audit(163.608:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  163.683945][T14601] bond_slave_0: entered promiscuous mode
[  163.706832][   T29] audit: type=1326 audit(163.608:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  163.706906][   T29] audit: type=1326 audit(163.608:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  163.712860][T14601] bond_slave_1: entered promiscuous mode
[  163.768487][T14601] batadv0: entered promiscuous mode
[  163.777389][T14601] hsr1: entered allmulticast mode
[  163.782476][T14601] bond0: entered allmulticast mode
[  163.787682][T14601] bond_slave_0: entered allmulticast mode
[  163.793459][T14601] bond_slave_1: entered allmulticast mode
[  163.799251][T14601] batadv0: entered allmulticast mode
[  163.836712][T14601] 8021q: adding VLAN 0 to HW filter on device hsr1
[  163.856354][T14601] bond0: left promiscuous mode
[  163.861251][T14601] bond_slave_0: left promiscuous mode
[  163.866802][T14601] bond_slave_1: left promiscuous mode
[  163.898949][T14601] batadv0: left promiscuous mode
[  163.935891][   T29] audit: type=1400 audit(163.908:6284): avc:  denied  { read } for  pid=14614 comm="syz.9.4866" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  163.958162][   T29] audit: type=1400 audit(163.918:6285): avc:  denied  { open } for  pid=14614 comm="syz.9.4866" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  163.981978][T14615] openvswitch: netlink: Message has 6 unknown bytes.
[  164.008815][T14618] netlink: 204 bytes leftover after parsing attributes in process `syz.9.4867'.
[  164.195406][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4881'.
[  164.234478][T14640] infiniband syz1: set active
[  164.239257][T14640] infiniband syz1: added syz_tun
[  164.256556][T14640] RDS/IB: syz1: added
[  164.263129][T14640] smc: adding ib device syz1 with port count 1
[  164.271196][T14640] smc:    ib device syz1 port 1 has pnetid 
[  164.345511][T14666] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  164.356797][T14663] IPVS: stopping master sync thread 14666 ...
[  164.639320][T14688] bridge_slave_0: left allmulticast mode
[  164.645032][T14688] bridge_slave_0: left promiscuous mode
[  164.650773][T14688] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.666570][T14688] bridge_slave_1: left allmulticast mode
[  164.672276][T14688] bridge_slave_1: left promiscuous mode
[  164.678034][T14688] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.688983][T14688] bond0: (slave bond_slave_0): Releasing backup interface
[  164.750603][ T3484] kernel write not supported for file bpf-prog (pid: 3484 comm: kworker/1:4)
[  164.759869][T14688] bond0: (slave bond_slave_1): Releasing backup interface
[  164.778073][T14688] team0: Port device team_slave_0 removed
[  164.800240][T14688] team0: Port device team_slave_1 removed
[  164.810848][T14688] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.818327][T14688] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.849596][T14688] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.857087][T14688] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.886501][T14688] batadv1: left allmulticast mode
[  164.891700][T14688] batadv1: left promiscuous mode
[  164.896849][T14688] bridge0: port 3(batadv1) entered disabled state
[  165.047958][T14735] loop9: detected capacity change from 0 to 512
[  165.068737][T14735] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  165.081504][T14735] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  165.098260][T14735] EXT4-fs (loop9): 1 truncate cleaned up
[  165.106401][T14735] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.146619][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.197517][T14754] loop8: detected capacity change from 0 to 512
[  165.204391][T14754] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  165.293561][T14764] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.347652][T14764] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.399104][T14764] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.449312][T14764] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.506455][ T3436] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.526058][ T3436] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.542980][ T3436] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.551832][ T3436] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.044710][T14803] rdma_op ffff888103f8fd80 conn xmit_rdma 0000000000000000
[  166.155453][T14815] netlink: 'syz.0.4954': attribute type 6 has an invalid length.
[  166.696615][T14886] netlink: 'syz.8.4984': attribute type 10 has an invalid length.
[  166.704491][T14886] __nla_validate_parse: 7 callbacks suppressed
[  166.704509][T14886] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4984'.
[  166.722741][T14886] dummy0: entered promiscuous mode
[  166.781300][T14895] ALSA: seq fatal error: cannot create timer (-22)
[  166.812862][T14901] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  166.831063][T14903] loop8: detected capacity change from 0 to 512
[  166.847433][T14903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.866733][T14903] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.4991: corrupted inode contents
[  166.886623][T14903] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.4991: mark_inode_dirty error
[  166.900056][T14903] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.4991: corrupted inode contents
[  166.902167][T14907] bridge_slave_0: left promiscuous mode
[  166.917904][T14907] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.919840][T14903] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4991: mark_inode_dirty error
[  166.938940][T14907] bridge_slave_1: left allmulticast mode
[  166.944665][T14907] bridge_slave_1: left promiscuous mode
[  166.950497][T14907] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.961571][T14907] bond0: (slave bond_slave_0): Releasing backup interface
[  166.969883][T14907] bond_slave_0: left allmulticast mode
[  166.977726][T14907] bond0: (slave bond_slave_1): Releasing backup interface
[  166.986884][T14907] bond_slave_1: left allmulticast mode
[  166.997006][T14907] team0: Port device team_slave_0 removed
[  167.006387][T14907] team0: Port device team_slave_1 removed
[  167.014427][T14907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.022041][T14907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.031654][T14907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.039332][T14907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.061598][T14907] bond1: (slave gretap1): Releasing active interface
[  167.099662][T10515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.127184][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4997'.
[  167.279332][T14938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.302009][T14938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.429333][T14951] bond0: (slave bond_slave_0): Releasing backup interface
[  167.442548][T14951] bond0: (slave bond_slave_1): Releasing backup interface
[  167.460416][T14951] team0: Port device team_slave_0 removed
[  167.480765][T14951] team0: Port device team_slave_1 removed
[  167.488173][T14951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.495891][T14951] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.598415][T14969] ALSA: seq fatal error: cannot create timer (-22)
[  167.700765][T14978] syz.4.5023 (14978) used greatest stack depth: 9200 bytes left
[  167.741827][ T1034] kernel write not supported for file /1939/attr/exec (pid: 1034 comm: kworker/0:2)
[  167.836195][T14997] hub 9-0:1.0: USB hub found
[  167.840922][T14997] hub 9-0:1.0: 8 ports detected
[  167.872281][T15001] bridge_slave_0: left allmulticast mode
[  167.878094][T15001] bridge_slave_0: left promiscuous mode
[  167.883822][T15001] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.915919][T15001] bridge_slave_1: left allmulticast mode
[  167.921644][T15001] bridge_slave_1: left promiscuous mode
[  167.927687][T15001] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.946657][T15001] bond0: (slave bond_slave_0): Releasing backup interface
[  167.966518][T15001] bond0: (slave bond_slave_1): Releasing backup interface
[  167.984762][T15001] team0: Port device team_slave_0 removed
[  167.994170][T15001] team0: Port device team_slave_1 removed
[  168.009999][T15011] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5035'.
[  168.027371][T15001] batadv0: left allmulticast mode
[  168.032529][T15001] batadv0: left promiscuous mode
[  168.037669][T15001] bridge0: port 3(batadv0) entered disabled state
[  168.103607][T15018] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  168.150166][T15008] lo speed is unknown, defaulting to 1000
[  168.187634][   T29] kauditd_printk_skb: 91 callbacks suppressed
[  168.187652][   T29] audit: type=1326 audit(168.168:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f43eb39ebe9 code=0x7ffc0000
[  168.216778][   T29] audit: type=1326 audit(168.168:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb39ebe9 code=0x7ffc0000
[  168.243659][   T29] audit: type=1326 audit(168.168:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f43eb39ebe9 code=0x7ffc0000
[  168.266730][   T29] audit: type=1326 audit(168.168:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb39ebe9 code=0x7ffc0000
[  168.289898][   T29] audit: type=1326 audit(168.168:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb39ebe9 code=0x7ffc0000
[  168.312847][   T29] audit: type=1326 audit(168.168:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f43eb39ebe9 code=0x7ffc0000
[  168.335748][   T29] audit: type=1400 audit(168.168:6383): avc:  denied  { lock } for  pid=15027 comm="syz.4.5045" path="socket:[46912]" dev="sockfs" ino=46912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  168.359108][   T29] audit: type=1326 audit(168.168:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43eb39ebe9 code=0x7ffc0000
[  168.382226][   T29] audit: type=1326 audit(168.168:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f43eb39ebe9 code=0x7ffc0000
[  168.382259][   T29] audit: type=1326 audit(168.168:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15027 comm="syz.4.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43eb395ba7 code=0x7ffc0000
[  168.431124][T15031] loop2: detected capacity change from 0 to 7
[  168.587829][T15049] bond0: (slave dummy0): Releasing backup interface
[  168.596112][T15049] dummy0: left allmulticast mode
[  168.610505][T15049] bridge_slave_0: left allmulticast mode
[  168.616294][T15049] bridge_slave_0: left promiscuous mode
[  168.622098][T15049] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.829438][T15049] bridge_slave_1: left allmulticast mode
[  168.835165][T15049] bridge_slave_1: left promiscuous mode
[  168.841099][T15049] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.850785][T15049] bond0: (slave bond_slave_0): Releasing backup interface
[  168.859029][T15049] bond_slave_0: left allmulticast mode
[  168.872948][T15049] bond0: (slave bond_slave_1): Releasing backup interface
[  168.882081][T15049] bond_slave_1: left allmulticast mode
[  168.897464][T15049] team0: Port device team_slave_0 removed
[  168.910728][T15049] team0: Port device team_slave_1 removed
[  168.925499][T15049] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.932971][T15049] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.953082][T15049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.960673][T15049] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.985469][T15049] syz_tun: left allmulticast mode
[  168.990629][T15049] syz_tun: left promiscuous mode
[  169.009247][T15049] team0: Port device macvlan2 removed
[  169.028202][T15049] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  169.035397][T15049] batman_adv: batadv0: Removing interface: ip6gretap1
[  169.075568][ T1034] syz!: Port: 1 Link DOWN
[  169.201683][T15082] loop8: detected capacity change from 0 to 512
[  169.222465][T15082] EXT4-fs (loop8): orphan cleanup on readonly fs
[  169.230224][T15082] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.5068: inode #218103808: comm syz.8.5068: iget: illegal inode #
[  169.244335][T15082] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.5068: Bad quota inode: 218103808, type: 2
[  169.256247][T15082] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  169.287370][T15082] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  169.294793][T15082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  169.344793][T15082] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  169.366626][T15082] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.5068: inode #218103808: comm syz.8.5068: iget: illegal inode #
[  169.381255][T15082] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.5068: Bad quota inode: 218103808, type: 2
[  169.393704][T15082] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  169.412532][T15105] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.5068: iget: bad i_size value: 360287970189639690
[  169.465855][T10515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.873583][T15159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5102'.
[  170.197714][T15184] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.257794][T15184] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.330260][T15184] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.387159][T15184] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.451684][   T37] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.463671][   T57] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.475783][   T57] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.487603][   T37] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.501287][T15193] $H�: renamed from bond0 (while UP)
[  170.508362][T15193] $H�: entered promiscuous mode
[  171.493359][T15251] rdma_op ffff8881199ef980 conn xmit_rdma 0000000000000000
[  171.813677][T15195] syz.9.5117 (15195) used greatest stack depth: 7304 bytes left
[  171.813743][T15273] bridge: RTM_NEWNEIGH with invalid ether address
[  171.883370][T15280] ALSA: seq fatal error: cannot create timer (-22)
[  172.081056][T15306] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  172.081242][T15305] IPVS: stopping master sync thread 15306 ...
[  172.498453][T15337] program syz.1.5179 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.507956][T15337] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  172.623781][T15345] loop2: detected capacity change from 0 to 7
[  172.778905][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5187'.
[  172.858761][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5192'.
[  172.906423][T15369] gtp0: entered promiscuous mode
[  173.000499][T15371] lo speed is unknown, defaulting to 1000
[  173.113441][   T36] hid_parser_main: 5 callbacks suppressed
[  173.113465][   T36] hid-generic 0000:0004:0000.004C: unknown main item tag 0x0
[  173.127098][   T36] hid-generic 0000:0004:0000.004C: unknown main item tag 0x0
[  173.134675][   T36] hid-generic 0000:0004:0000.004C: unknown main item tag 0x0
[  173.178340][   T36] hid-generic 0000:0004:0000.004C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  173.199168][   T29] kauditd_printk_skb: 393 callbacks suppressed
[  173.199186][   T29] audit: type=1326 audit(173.178:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f26b1abec77 code=0x7ffc0000
[  173.243423][   T29] audit: type=1326 audit(173.188:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26b1abd550 code=0x7ffc0000
[  173.266415][   T29] audit: type=1326 audit(173.188:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f26b1abd84a code=0x7ffc0000
[  173.289469][   T29] audit: type=1326 audit(173.188:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  173.312596][   T29] audit: type=1326 audit(173.188:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  173.335738][   T29] audit: type=1326 audit(173.188:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  173.358632][   T29] audit: type=1326 audit(173.188:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  173.381650][   T29] audit: type=1326 audit(173.188:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  173.404662][   T29] audit: type=1326 audit(173.188:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  173.427609][   T29] audit: type=1326 audit(173.188:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15383 comm="syz.1.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b1abebe9 code=0x7ffc0000
[  173.671942][T15412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5214'.
[  173.698134][T15414] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  174.372985][ T3359] hid-generic 0000:0004:0000.004D: unknown main item tag 0x0
[  174.380572][ T3359] hid-generic 0000:0004:0000.004D: unknown main item tag 0x0
[  174.388004][ T3359] hid-generic 0000:0004:0000.004D: unknown main item tag 0x0
[  174.397893][ T3359] hid-generic 0000:0004:0000.004D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  175.754559][T15590] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5269'.
[  175.855885][T15592] netlink: 'syz.1.5270': attribute type 10 has an invalid length.
[  175.880329][T15594] loop9: detected capacity change from 0 to 128
[  175.886256][T15592] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  175.950443][T15592] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.957406][T15594] FAT-fs (loop9): Directory bread(block 162) failed
[  175.964524][T15594] FAT-fs (loop9): Directory bread(block 163) failed
[  175.976890][T15594] FAT-fs (loop9): Directory bread(block 164) failed
[  175.981804][T15592] lo: entered allmulticast mode
[  175.988594][T15594] FAT-fs (loop9): Directory bread(block 165) failed
[  176.010245][T15592] bond0: (slave lo): Enslaving as an active interface with an up link
[  176.017200][T15594] FAT-fs (loop9): Directory bread(block 166) failed
[  176.025207][T15594] FAT-fs (loop9): Directory bread(block 167) failed
[  176.050560][T15594] FAT-fs (loop9): Directory bread(block 168) failed
[  176.065141][T15594] FAT-fs (loop9): Directory bread(block 169) failed
[  176.071175][T15598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.094501][T15598] tipc: Disabling bearer <eth:syzkaller0>
[  176.107747][T15594] FAT-fs (loop9): Directory bread(block 162) failed
[  176.114430][T15594] FAT-fs (loop9): Directory bread(block 163) failed
[  176.125328][ T3359] hid-generic 0000:0004:0000.004E: unknown main item tag 0x0
[  176.126045][T15594] bio_check_eod: 18 callbacks suppressed
[  176.126062][T15594] syz.9.5271: attempt to access beyond end of device
[  176.126062][T15594] loop9: rw=3, sector=226, nr_sectors = 6 limit=128
[  176.132820][ T3359] hid-generic 0000:0004:0000.004E: unknown main item tag 0x0
[  176.138648][T15594] syz.9.5271: attempt to access beyond end of device
[  176.138648][T15594] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128
[  176.151601][ T3359] hid-generic 0000:0004:0000.004E: unknown main item tag 0x0
[  176.247320][T15516] syz.8.5262 (15516) used greatest stack depth: 6976 bytes left
[  176.255778][ T3359] hid-generic 0000:0004:0000.004E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  176.630257][T15650] lo speed is unknown, defaulting to 1000
[  176.649925][T15658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5291'.
[  177.131803][T15691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15691 comm=syz.1.5302
[  177.157623][T15688] batadv_slave_1: entered promiscuous mode
[  177.169979][T15688] batadv_slave_1: left promiscuous mode
[  177.280991][   T36] hid-generic 0000:0004:0000.004F: unknown main item tag 0x0
[  177.291538][   T36] hid-generic 0000:0004:0000.004F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  177.316197][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5308'.
[  177.325186][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5308'.
[  177.346151][T15709] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5312'.
[  177.433238][T15721] loop9: detected capacity change from 0 to 512
[  177.449945][T15721] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  177.459180][T15721] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  177.489182][T15721] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  177.507306][T15721] System zones: 0-2, 18-18, 34-35
[  177.519375][T15721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  177.640147][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.041012][T15772] ������: renamed from bond_slave_0
[  178.381715][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5341'.
[  178.477720][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5341'.
[  178.554263][   T36] hid_parser_main: 2 callbacks suppressed
[  178.554331][   T36] hid-generic 0000:0004:0000.0050: unknown main item tag 0x0
[  178.567661][   T36] hid-generic 0000:0004:0000.0050: unknown main item tag 0x0
[  178.575105][   T36] hid-generic 0000:0004:0000.0050: unknown main item tag 0x0
[  178.606273][   T36] hid-generic 0000:0004:0000.0050: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  178.861935][   T29] kauditd_printk_skb: 192 callbacks suppressed
[  178.861952][   T29] audit: type=1400 audit(178.838:6982): avc:  denied  { tracepoint } for  pid=15817 comm="syz.9.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  178.912550][   T29] audit: type=1400 audit(178.868:6983): avc:  denied  { cpu } for  pid=15817 comm="syz.9.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  178.931456][   T29] audit: type=1400 audit(178.868:6984): avc:  denied  { write } for  pid=15817 comm="syz.9.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  179.065417][   T29] audit: type=1400 audit(179.038:6985): avc:  denied  { listen } for  pid=15825 comm="syz.4.5354" lport=53853 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  179.103689][   T29] audit: type=1400 audit(179.068:6986): avc:  denied  { accept } for  pid=15825 comm="syz.4.5354" lport=53853 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  179.126226][   T29] audit: type=1400 audit(179.068:6987): avc:  denied  { write } for  pid=15825 comm="syz.4.5354" lport=53853 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  179.149304][   T29] audit: type=1400 audit(179.068:6988): avc:  denied  { setopt } for  pid=15825 comm="syz.4.5354" lport=53853 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  179.174249][   T29] audit: type=1400 audit(179.128:6989): avc:  denied  { read write } for  pid=15827 comm="syz.4.5355" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  179.197130][   T29] audit: type=1400 audit(179.128:6990): avc:  denied  { open } for  pid=15827 comm="syz.4.5355" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  179.219974][   T29] audit: type=1400 audit(179.128:6991): avc:  denied  { ioctl } for  pid=15827 comm="syz.4.5355" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  179.334328][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5361'.
[  179.343317][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5361'.
[  179.353015][T15837] netlink: 'syz.0.5360': attribute type 10 has an invalid length.
[  179.377365][T15837] team0: Device hsr_slave_0 failed to register rx_handler
[  179.424538][T15844] futex_wake_op: syz.4.5364 tries to shift op by -1; fix this program
[  179.466067][T15847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.485203][T15847] tipc: Disabling bearer <eth:syzkaller0>
[  179.518402][T15859] netlink: 'syz.4.5370': attribute type 12 has an invalid length.
[  179.826795][ T1034] hid-generic 0000:0004:0000.0051: unknown main item tag 0x0
[  179.834328][ T1034] hid-generic 0000:0004:0000.0051: unknown main item tag 0x0
[  179.841869][ T1034] hid-generic 0000:0004:0000.0051: unknown main item tag 0x0
[  179.854548][ T1034] hid-generic 0000:0004:0000.0051: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  180.318475][T15945] loop9: detected capacity change from 0 to 4096
[  180.329917][T15945] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.360696][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.427389][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5410'.
[  180.438087][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5410'.
[  180.591035][T15958] loop9: detected capacity change from 0 to 512
[  180.597789][T15958] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  180.608964][T15958] EXT4-fs (loop9): 1 truncate cleaned up
[  180.614956][T15958] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.629491][T15958] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #15: comm syz.9.5413: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  180.676521][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.707184][T15968] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  180.774675][T15977] syzkaller1: entered promiscuous mode
[  180.780232][T15977] syzkaller1: entered allmulticast mode
[  180.952792][T16011] loop8: detected capacity change from 0 to 2048
[  180.976811][T16011]  loop8: p1 < > p4
[  180.982798][T16011] loop8: p4 size 8388608 extends beyond EOD, truncated
[  181.082675][T16024] syz_tun: entered promiscuous mode
[  181.094747][T16024] vlan2: entered promiscuous mode
[  181.411180][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5449'.
[  181.421171][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5449'.
[  181.559382][T16052] SELinux: ebitmap: truncated map
[  181.568021][T16052] SELinux: failed to load policy
[  181.719862][T16062] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  181.810679][ T3359] hid-generic 0000:0004:0000.0052: unknown main item tag 0x0
[  181.818163][ T3359] hid-generic 0000:0004:0000.0052: unknown main item tag 0x0
[  181.825573][ T3359] hid-generic 0000:0004:0000.0052: unknown main item tag 0x0
[  181.902459][ T3359] hid-generic 0000:0004:0000.0052: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  181.933956][T16075] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  182.055798][T16077] SELinux: ebitmap: truncated map
[  182.067716][T16077] SELinux: failed to load policy
[  182.114979][T16091] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  182.160325][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5476'.
[  182.191706][T16102] cgroup: Invalid name
[  182.263577][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5483'.
[  183.266462][T16178] lo speed is unknown, defaulting to 1000
[  183.429541][T16178] chnl_net:caif_netlink_parms(): no params data found
[  183.557876][T16220] loop9: detected capacity change from 0 to 164
[  183.576149][T16178] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.583416][T16178] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.600708][T16220] rock: directory entry would overflow storage
[  183.607043][T16220] rock: sig=0x66, size=4, remaining=3
[  183.634985][T16220] rock: directory entry would overflow storage
[  183.638354][T16178] bridge_slave_0: entered allmulticast mode
[  183.641306][T16220] rock: sig=0x66, size=4, remaining=3
[  183.668934][T16178] bridge_slave_0: entered promiscuous mode
[  183.685342][T16220] iso9660: Corrupted directory entry in block 4 of inode 1792
[  183.688553][T16178] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.700043][T16178] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.723253][T16178] bridge_slave_1: entered allmulticast mode
[  183.744129][T16178] bridge_slave_1: entered promiscuous mode
[  183.771368][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.778946][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.786413][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.794000][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.801467][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.808948][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.816635][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.824089][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.831587][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.839058][   T23] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  183.848649][   T23] hid-generic 0000:0000:0000.0053: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  183.864472][T16178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.881338][   T29] kauditd_printk_skb: 227 callbacks suppressed
[  183.881356][   T29] audit: type=1400 audit(183.858:7219): avc:  denied  { read } for  pid=16221 comm="syz.0.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  183.899774][T16228] loop9: detected capacity change from 0 to 1024
[  183.913274][T16228] EXT4-fs: Ignoring removed bh option
[  183.924846][T16178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.949884][T16228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.978313][T16178] team0: Port device team_slave_0 added
[  183.985178][T16178] team0: Port device team_slave_1 added
[  183.995226][T16236] netlink: zone id is out of range
[  184.016833][T16178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.019436][T16236] netlink: zone id is out of range
[  184.024058][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.042007][T16236] netlink: zone id is out of range
[  184.055261][T16178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.071838][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.094228][T16236] netlink: zone id is out of range
[  184.120659][   T29] audit: type=1400 audit(184.098:7220): avc:  denied  { create } for  pid=16240 comm="syz.0.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  184.139922][   T29] audit: type=1400 audit(184.098:7221): avc:  denied  { ioctl } for  pid=16240 comm="syz.0.5534" path="socket:[50975]" dev="sockfs" ino=50975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  184.164135][   T29] audit: type=1400 audit(184.098:7222): avc:  denied  { bind } for  pid=16240 comm="syz.0.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  184.196483][T16178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.203583][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.229590][T16178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.263693][   T29] audit: type=1400 audit(184.098:7223): avc:  denied  { connect } for  pid=16240 comm="syz.0.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  184.282814][   T29] audit: type=1400 audit(184.098:7224): avc:  denied  { write } for  pid=16240 comm="syz.0.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  184.319015][T16178] hsr_slave_0: entered promiscuous mode
[  184.325134][T16178] hsr_slave_1: entered promiscuous mode
[  184.330998][T16178] debugfs: 'hsr0' already exists in 'hsr'
[  184.336823][T16178] Cannot create hsr debugfs directory
[  184.399867][   T29] audit: type=1326 audit(184.378:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz.8.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  184.422972][   T29] audit: type=1326 audit(184.378:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz.8.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  184.458402][   T29] audit: type=1326 audit(184.378:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz.8.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  184.481548][   T29] audit: type=1326 audit(184.378:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz.8.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  184.598968][T16268] loop9: detected capacity change from 0 to 1024
[  184.635013][T16268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.652791][T16268] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.5545: Allocating blocks 385-513 which overlap fs metadata
[  184.670018][T16268] EXT4-fs (loop9): pa ffff88810729c310: logic 16, phys. 129, len 24
[  184.678102][T16268] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  184.715747][T16178] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  184.719265][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.735435][T16178] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  184.745302][T16178] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  184.753834][T16281] __nla_validate_parse: 2 callbacks suppressed
[  184.753941][T16281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5544'.
[  184.772755][T16178] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  184.843297][T16178] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.874307][T16178] 8021q: adding VLAN 0 to HW filter on device team0
[  184.881078][    C1] vcan0: j1939_tp_rxtimer: 0xffff888120090e00: rx timeout, send abort
[  184.881143][    C1] vcan0: j1939_tp_rxtimer: 0xffff888120091000: rx timeout, send abort
[  184.889406][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888120090e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  184.889474][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888120091000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  184.954199][T15531] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.961307][T15531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.988150][T15531] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.995266][T15531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.077014][T16319] loop9: detected capacity change from 0 to 512
[  185.095752][T16319] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  185.111238][T16319] EXT4-fs (loop9): 1 truncate cleaned up
[  185.118606][T16319] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.144485][T16178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.176629][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.370661][T16345] loop8: detected capacity change from 0 to 1024
[  185.380907][T16345] EXT4-fs: Ignoring removed orlov option
[  185.387051][T16178] veth0_vlan: entered promiscuous mode
[  185.397217][T16178] veth1_vlan: entered promiscuous mode
[  185.403378][T16345] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  185.416733][T16345] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  185.422937][T16178] veth0_macvtap: entered promiscuous mode
[  185.438438][T16178] veth1_macvtap: entered promiscuous mode
[  185.450703][T16345] EXT4-fs (loop8): invalid journal inode
[  185.451549][T16178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.470774][T16178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.472933][T16345] EXT4-fs (loop8): can't get journal size
[  185.482677][T15561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.496361][T16345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  185.505007][T15561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.545219][T10515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.562831][T15561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.582000][T15561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.594042][T16356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16356 comm=syz.9.5578
[  185.700679][T16367] ref_ctr increment failed for inode: 0xae1 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810b1dae00
[  185.712549][T16366] uprobe: syz.8.5581:16366 failed to unregister, leaking uprobe
[  185.788300][T16372] netlink: 'syz.9.5583': attribute type 21 has an invalid length.
[  185.801833][T16372] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5583'.
[  186.231148][T16403] geneve2: entered promiscuous mode
[  186.236447][T16403] geneve2: entered allmulticast mode
[  186.353535][T16409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.371829][T16409] tipc: Disabling bearer <eth:syzkaller0>
[  186.464852][T16419] ALSA: seq fatal error: cannot create timer (-22)
[  186.508110][T16421] loop8: detected capacity change from 0 to 164
[  186.538145][T16421] syz.8.5605: attempt to access beyond end of device
[  186.538145][T16421] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  186.554252][T16429] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5609'.
[  186.563077][T16421] syz.8.5605: attempt to access beyond end of device
[  186.563077][T16421] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164
[  186.650145][T16441] pimreg: entered allmulticast mode
[  186.675950][T16441] pimreg: left allmulticast mode
[  186.693276][T16445] ref_ctr_offset mismatch. inode: 0x5f8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18
[  186.711806][T16447] wireguard0: entered promiscuous mode
[  186.717502][T16447] wireguard0: entered allmulticast mode
[  186.846508][T16460] netlink: 29 bytes leftover after parsing attributes in process `syz.9.5624'.
[  187.449641][T16521] loop8: detected capacity change from 0 to 128
[  187.463425][T16521] syz.8.5648: attempt to access beyond end of device
[  187.463425][T16521] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128
[  187.485895][T16521] syz.8.5648: attempt to access beyond end of device
[  187.485895][T16521] loop8: rw=2049, sector=146, nr_sectors = 8 limit=128
[  187.499828][ T1034] hid-generic 0000:0004:0000.0054: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  187.500200][T16521] syz.8.5648: attempt to access beyond end of device
[  187.500200][T16521] loop8: rw=2049, sector=152, nr_sectors = 2 limit=128
[  187.523066][T16521] buffer_io_error: 4 callbacks suppressed
[  187.523085][T16521] Buffer I/O error on dev loop8, logical block 76, lost async page write
[  187.537783][T16521] syz.8.5648: attempt to access beyond end of device
[  187.537783][T16521] loop8: rw=2049, sector=170, nr_sectors = 8 limit=128
[  187.551667][T16521] syz.8.5648: attempt to access beyond end of device
[  187.551667][T16521] loop8: rw=2049, sector=176, nr_sectors = 2 limit=128
[  187.565119][T16521] Buffer I/O error on dev loop8, logical block 88, lost async page write
[  187.585093][T15557] kworker/u8:46: attempt to access beyond end of device
[  187.585093][T15557] loop8: rw=1, sector=138, nr_sectors = 8 limit=128
[  187.605896][T15557] kworker/u8:46: attempt to access beyond end of device
[  187.605896][T15557] loop8: rw=1, sector=146, nr_sectors = 2 limit=128
[  187.619464][T15557] Buffer I/O error on dev loop8, logical block 73, lost async page write
[  187.629039][T15557] kworker/u8:46: attempt to access beyond end of device
[  187.629039][T15557] loop8: rw=1, sector=148, nr_sectors = 2 limit=128
[  187.642602][T15557] Buffer I/O error on dev loop8, logical block 74, lost async page write
[  187.651730][T15557] Buffer I/O error on dev loop8, logical block 75, lost async page write
[  187.660616][T15557] Buffer I/O error on dev loop8, logical block 76, lost async page write
[  187.669746][T16521] Buffer I/O error on dev loop8, logical block 92, lost async page write
[  187.698147][T16521] Buffer I/O error on dev loop8, logical block 104, lost async page write
[  187.713051][T16521] Buffer I/O error on dev loop8, logical block 108, lost async page write
[  187.726796][T16521] Buffer I/O error on dev loop8, logical block 120, lost async page write
[  187.751334][T16529] loop9: detected capacity change from 0 to 512
[  187.771174][T16529] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  187.790536][T16529] EXT4-fs (loop9): orphan cleanup on readonly fs
[  187.807369][T16529] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.5650: Failed to acquire dquot type 1
[  187.820584][T16529] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5650: bg 0: block 40: padding at end of block bitmap is not set
[  187.835064][T16529] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  187.844483][T16529] EXT4-fs (loop9): 1 truncate cleaned up
[  187.854435][T16529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  187.888726][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.936325][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5653'.
[  187.945297][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5653'.
[  187.967189][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5653'.
[  187.968070][T15557] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.976128][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5653'.
[  188.002644][T15557] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.034658][T15557] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.061079][T15557] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.337194][T16576] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.372521][T16583] serio: Serial port ptm0
[  188.448386][T16576] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.508622][T16576] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.528677][T16597] netlink: 'syz.9.5682': attribute type 10 has an invalid length.
[  188.558812][T16597] 8021q: adding VLAN 0 to HW filter on device team0
[  188.587394][T16597] bond0: (slave team0): Enslaving as an active interface with an up link
[  188.597639][T16576] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.677628][T15542] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.703021][T15542] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.719369][T15542] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.728379][T15542] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.947430][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5690'.
[  188.980300][T16622] netlink: 'syz.0.5692': attribute type 10 has an invalid length.
[  189.013319][T16622] team0: Port device dummy0 added
[  189.030648][T16622] netlink: 'syz.0.5692': attribute type 10 has an invalid length.
[  189.048898][   T29] kauditd_printk_skb: 161 callbacks suppressed
[  189.048917][   T29] audit: type=1326 audit(189.028:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.078199][   T29] audit: type=1326 audit(189.028:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.117451][   T29] audit: type=1326 audit(189.028:7390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.121905][T16622] team0: Port device dummy0 removed
[  189.140572][   T29] audit: type=1326 audit(189.028:7391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.168614][   T29] audit: type=1326 audit(189.028:7392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.184952][T16622] dummy0: entered allmulticast mode
[  189.191574][   T29] audit: type=1326 audit(189.028:7393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.200630][T16622] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  189.219753][   T29] audit: type=1326 audit(189.028:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.251216][   T29] audit: type=1326 audit(189.028:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.274226][   T29] audit: type=1326 audit(189.028:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.297275][   T29] audit: type=1326 audit(189.028:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.8.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  189.332840][T16624] syzkaller0: entered allmulticast mode
[  189.340647][T16636] netlink: 'syz.8.5699': attribute type 21 has an invalid length.
[  189.341428][T16628] syzkaller0 (unregistering): left allmulticast mode
[  189.407269][T16636] netlink: 'syz.8.5699': attribute type 1 has an invalid length.
[  189.415068][T16636] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5699'.
[  189.472486][T16647] netlink: '+}[@': attribute type 13 has an invalid length.
[  189.627689][T16673] loop9: detected capacity change from 0 to 128
[  189.649492][T16673] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  189.703304][T13078] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.734401][   T36] syz1: Port: 1 Link DOWN
[  189.745935][T15542] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.760706][T15542] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.770205][T15542] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.780564][T15542] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.028517][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5726'.
[  190.048079][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5726'.
[  190.099811][T16705] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.110027][T16705] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.218740][T16705] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.228661][T16705] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.309375][T16705] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.319387][T16705] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.377578][T16705] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.387501][T16705] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.468759][T15531] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.477074][T15531] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.501249][T16730] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5739'.
[  190.521219][T15531] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.529490][T15531] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.562200][T15531] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.570575][T15531] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.596661][T15531] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.604924][T15531] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.644796][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5744'.
[  190.653876][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5744'.
[  190.671181][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5742'.
[  190.680137][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5742'.
[  190.788043][ T3359] hid_parser_main: 36 callbacks suppressed
[  190.788066][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x1
[  190.801581][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0
[  190.809073][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0
[  190.816535][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0
[  190.823945][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0
[  190.831362][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0
[  190.840706][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0
[  190.848266][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0
[  190.855717][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x2
[  190.863210][ T3359] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0
[  190.881982][ T3359] hid-generic 0000:0000:0000.0055: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  190.941471][ T3359] hid-generic 0000:0004:0000.0056: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  190.992522][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5756'.
[  191.001510][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5756'.
[  191.160049][T16782] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.207732][T16782] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.307358][T16782] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.382760][T16782] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.469196][T15561] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.485460][T15561] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.504633][T15561] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.522892][T15561] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.261633][T16856] loop9: detected capacity change from 0 to 128
[  192.323433][T16858] bio_check_eod: 27 callbacks suppressed
[  192.323450][T16858] syz.9.5794: attempt to access beyond end of device
[  192.323450][T16858] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128
[  192.343460][T16858] syz.9.5794: attempt to access beyond end of device
[  192.343460][T16858] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128
[  192.357332][T16858] syz.9.5794: attempt to access beyond end of device
[  192.357332][T16858] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128
[  192.371360][T16858] syz.9.5794: attempt to access beyond end of device
[  192.371360][T16858] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128
[  192.410680][T16858] syz.9.5794: attempt to access beyond end of device
[  192.410680][T16858] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128
[  192.431848][T16858] syz.9.5794: attempt to access beyond end of device
[  192.431848][T16858] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128
[  192.445588][T16858] syz.9.5794: attempt to access beyond end of device
[  192.445588][T16858] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128
[  192.459296][T16858] syz.9.5794: attempt to access beyond end of device
[  192.459296][T16858] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128
[  192.473020][T16858] syz.9.5794: attempt to access beyond end of device
[  192.473020][T16858] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128
[  192.487231][T16858] syz.9.5794: attempt to access beyond end of device
[  192.487231][T16858] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128
[  192.594863][ T3359] hid-generic 0000:0004:0000.0057: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  192.649014][ T3359] IPVS: starting estimator thread 0...
[  192.649642][T16868] dummy0: left promiscuous mode
[  192.736044][T16873] IPVS: using max 2448 ests per chain, 122400 per kthread
[  192.794662][T15531] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.805825][T15542] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.836811][T15542] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.853997][ T3484] hid-generic 0000:0004:0000.0058: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  192.854764][T15542] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.933852][T16903] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5814'.
[  192.950679][T16907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16907 comm=syz.8.5816
[  193.227528][T16934] loop9: detected capacity change from 0 to 512
[  193.238249][T16934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.418118][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.833373][T16972] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  194.210975][T16986] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.218240][T16986] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.248167][   T29] kauditd_printk_skb: 137 callbacks suppressed
[  194.248185][   T29] audit: type=1326 audit(194.218:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.277925][   T29] audit: type=1326 audit(194.218:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.301912][   T29] audit: type=1326 audit(194.228:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.324933][   T29] audit: type=1326 audit(194.228:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.348856][   T29] audit: type=1326 audit(194.228:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.371875][   T29] audit: type=1326 audit(194.228:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.396091][   T29] audit: type=1326 audit(194.228:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.421143][   T29] audit: type=1326 audit(194.228:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.446793][   T29] audit: type=1326 audit(194.228:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.469839][   T29] audit: type=1326 audit(194.228:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16996 comm="syz.9.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  194.592583][T16986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.631751][T16986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.768905][T15531] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.783678][T15531] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.813327][T15531] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.832920][T15531] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.913653][T17017] SELinux: failed to load policy
[  194.940291][T16948] syz.8.5835 (16948) used greatest stack depth: 6136 bytes left
[  194.956516][T17019] lo speed is unknown, defaulting to 1000
[  195.040338][T17034] __nla_validate_parse: 7 callbacks suppressed
[  195.040358][T17034] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5869'.
[  195.241524][T17049] netlink: 'syz.9.5880': attribute type 2 has an invalid length.
[  195.323505][T17053] netlink: 'syz.8.5881': attribute type 30 has an invalid length.
[  195.469569][T17058] loop9: detected capacity change from 0 to 1024
[  195.482216][T17058] EXT4-fs: Ignoring removed nobh option
[  195.496941][T17058] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  195.520891][T17058] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.5883: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  195.581376][T17058] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.5883: couldn't read orphan inode 11 (err -117)
[  195.637444][T17058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.681595][ T3359] hid-generic 0000:0004:0000.0059: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  195.710681][T17058] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  195.803011][T17072] 8021q: adding VLAN 0 to HW filter on device $H�
[  195.811369][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.812575][T17072] 8021q: adding VLAN 0 to HW filter on device team0
[  195.830998][T17072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.847461][   T36] syz1: Port: 1 Link ACTIVE
[  196.756921][T15561] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.775811][T15561] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.784294][T15561] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.805776][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5908'.
[  196.814963][T15561] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.823680][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5908'.
[  196.897707][T17122] netlink: 'syz.4.5912': attribute type 3 has an invalid length.
[  197.030602][T17141] bond0: (slave dummy0): Releasing backup interface
[  197.038935][T17141] dummy0: left allmulticast mode
[  197.183400][T17151] 9p: Unknown Cache mode or invalid value f
[  197.227751][T17149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5925'.
[  197.247151][T15531] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.255814][T15531] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.271039][T15531] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.279502][T15531] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.305776][T15546] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.314537][T15546] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.329573][T15546] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.338251][T15546] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.435963][T17166] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  197.617804][T17177] rdma_rxe: rxe_newlink: failed to add bond0
[  197.642059][T17179] loop3: detected capacity change from 0 to 2048
[  197.690138][T17179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.722135][T16178] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  197.746047][T16178] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  197.764155][T16178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.919567][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5951'.
[  197.946330][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5952'.
[  198.127761][T17233] netlink: 'syz.8.5962': attribute type 3 has an invalid length.
[  198.191105][T17242] hub 9-0:1.0: USB hub found
[  198.196995][T17242] hub 9-0:1.0: 8 ports detected
[  198.362677][T17266] serio: Serial port ptm0
[  198.391166][T17243] lo speed is unknown, defaulting to 1000
[  198.441629][T17274] loop9: detected capacity change from 0 to 7
[  198.450343][T17274] buffer_io_error: 9 callbacks suppressed
[  198.450359][T17274] Buffer I/O error on dev loop9, logical block 0, async page read
[  198.465255][T17274] Buffer I/O error on dev loop9, logical block 0, async page read
[  198.473173][T17274]  loop9: unable to read partition table
[  198.481480][T17274] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  198.481480][T17274] 
) failed (rc=-5)
[  198.558799][T17243] chnl_net:caif_netlink_parms(): no params data found
[  198.590084][T17288] loop3: detected capacity change from 0 to 512
[  198.598422][T17288] EXT4-fs (loop3): orphan cleanup on readonly fs
[  198.605206][T17288] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.5984: bad orphan inode 13
[  198.615742][T17288] ext4_test_bit(bit=12, block=18) = 1
[  198.621168][T17288] is_bad_inode(inode)=0
[  198.625337][T17288] NEXT_ORPHAN(inode)=2130706432
[  198.630287][T17288] max_ino=32
[  198.633492][T17288] i_nlink=1
[  198.637230][T17288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.638128][T17243] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.656939][T17243] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.681844][T17243] bridge_slave_0: entered allmulticast mode
[  198.688252][T16178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.697999][T17243] bridge_slave_0: entered promiscuous mode
[  198.704925][T17243] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.712353][T17243] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.724106][T17243] bridge_slave_1: entered allmulticast mode
[  198.741738][T17243] bridge_slave_1: entered promiscuous mode
[  198.764442][T17243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.777528][T17243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.817590][T17243] team0: Port device team_slave_0 added
[  198.834557][T17243] team0: Port device team_slave_1 added
[  198.843330][T17307] loop9: detected capacity change from 0 to 512
[  198.852644][T17304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5990'.
[  198.865700][T17307] EXT4-fs: Ignoring removed nobh option
[  198.875955][T17307] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  198.891999][T17243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.899105][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.925098][T17243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.936957][T17307] EXT4-fs (loop9): 1 truncate cleaned up
[  198.943059][T17307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.957566][T17243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.964537][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.990522][T17243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.004779][T17309] Falling back ldisc for ttyS3.
[  199.041241][T17243] hsr_slave_0: entered promiscuous mode
[  199.047506][T17243] hsr_slave_1: entered promiscuous mode
[  199.054730][T17243] debugfs: 'hsr0' already exists in 'hsr'
[  199.060588][T17243] Cannot create hsr debugfs directory
[  199.174729][T17339] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[  199.182587][T17339] SELinux: failed to load policy
[  199.273522][T17345] pim6reg1: entered promiscuous mode
[  199.279078][T17345] pim6reg1: entered allmulticast mode
[  199.404768][T17351] netlink: 'syz.8.6011': attribute type 3 has an invalid length.
[  199.409647][T17243] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  199.433850][T17243] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  199.436121][   T29] kauditd_printk_skb: 123 callbacks suppressed
[  199.436150][   T29] audit: type=1400 audit(199.418:7668): avc:  denied  { watch_reads } for  pid=17352 comm="syz.8.6012" path="/627/file0" dev="tmpfs" ino=3241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  199.471756][T17243] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  199.485050][T17243] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  199.561546][T17243] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.589060][T17243] 8021q: adding VLAN 0 to HW filter on device team0
[  199.598787][T15544] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.605909][T15544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.621871][T15544] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.629101][T15544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.650788][T17243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  199.661423][T17243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.683189][T13078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.728040][   T29] audit: type=1326 audit(199.698:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.751044][   T29] audit: type=1326 audit(199.698:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.774015][   T29] audit: type=1326 audit(199.698:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.796988][   T29] audit: type=1326 audit(199.698:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.819990][   T29] audit: type=1326 audit(199.698:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.850895][   T29] audit: type=1326 audit(199.708:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.873869][   T29] audit: type=1326 audit(199.708:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.896914][   T29] audit: type=1326 audit(199.708:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.920027][   T29] audit: type=1326 audit(199.778:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.9.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe283e9ebe9 code=0x7ffc0000
[  199.967551][T17243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.138094][T17414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6030'.
[  200.141802][T17243] veth0_vlan: entered promiscuous mode
[  200.177756][T17243] veth1_vlan: entered promiscuous mode
[  200.207769][T17243] veth0_macvtap: entered promiscuous mode
[  200.221058][T17243] veth1_macvtap: entered promiscuous mode
[  200.238173][T17243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.249435][T17420] binfmt_misc: register: failed to install interpreter file ./file2
[  200.257489][T17243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.262297][T15546] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.293276][T15546] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.318425][T15546] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.318546][T15546] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.421121][T17438] vhci_hcd: invalid port number 96
[  200.426327][T17438] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  200.464551][T17450] syzkaller1: entered promiscuous mode
[  200.470135][T17450] syzkaller1: entered allmulticast mode
[  200.543693][T17460] pim6reg1: entered promiscuous mode
[  200.549116][T17460] pim6reg1: entered allmulticast mode
[  201.400734][T17483] loop5: detected capacity change from 0 to 164
[  201.429429][T17483] rock: directory entry would overflow storage
[  201.435721][T17483] rock: sig=0x66, size=4, remaining=3
[  201.448879][T17483] rock: directory entry would overflow storage
[  201.455125][T17483] rock: sig=0x66, size=4, remaining=3
[  201.462197][T17483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6060'.
[  201.564431][T17474] lo speed is unknown, defaulting to 1000
[  201.685258][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6072'.
[  201.708750][T17511] vlan2: entered promiscuous mode
[  201.713867][T17511] gretap0: entered promiscuous mode
[  201.758110][T17520] bridge0: port 1(macsec1) entered blocking state
[  201.764758][T17520] bridge0: port 1(macsec1) entered disabled state
[  201.771883][T17520] macsec1: entered allmulticast mode
[  201.777273][T17520] bridge0: entered allmulticast mode
[  201.783234][T17520] macsec1: left allmulticast mode
[  201.788379][T17520] bridge0: left allmulticast mode
[  201.798156][T17474] chnl_net:caif_netlink_parms(): no params data found
[  201.844322][T17474] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.851616][T17474] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.859131][T17474] bridge_slave_0: entered allmulticast mode
[  201.865889][T17474] bridge_slave_0: entered promiscuous mode
[  201.878081][T17474] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.885237][T17474] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.892668][T17474] bridge_slave_1: entered allmulticast mode
[  201.899574][T17474] bridge_slave_1: entered promiscuous mode
[  201.938734][T17534] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6080'.
[  201.952061][T17474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.964747][T17534] 0��{X��: renamed from gretap0
[  201.981504][T17534] 0��{X��: entered allmulticast mode
[  201.998567][T17534] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  202.027315][T17474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.055487][T17549] loop3: detected capacity change from 0 to 2048
[  202.065233][T17552] netlink: 'syz.4.6084': attribute type 3 has an invalid length.
[  202.073145][T17552] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6084'.
[  202.104972][T17474] team0: Port device team_slave_0 added
[  202.124694][T17474] team0: Port device team_slave_1 added
[  202.144534][T17549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.207346][T17474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.214388][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.240428][T17474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.253726][T17474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.260889][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.286935][T17474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.319348][T16178] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  202.334528][T16178] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  202.350073][T17563] pim6reg1: entered promiscuous mode
[  202.355419][T17563] pim6reg1: entered allmulticast mode
[  202.366212][T16178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.380532][T17474] hsr_slave_0: entered promiscuous mode
[  202.387426][T17474] hsr_slave_1: entered promiscuous mode
[  202.394856][T17474] debugfs: 'hsr0' already exists in 'hsr'
[  202.400802][T17474] Cannot create hsr debugfs directory
[  202.500202][T17579] pim6reg1: entered promiscuous mode
[  202.505556][T17579] pim6reg1: entered allmulticast mode
[  202.721326][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6108'.
[  202.748203][T17606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6109'.
[  202.758008][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6109'.
[  202.796987][T17474] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  202.806382][T17474] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  202.815508][T17474] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  202.824793][T17474] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  202.880272][T17474] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.898362][T17474] 8021q: adding VLAN 0 to HW filter on device team0
[  202.911684][T15544] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.918820][T15544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.935971][T15531] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.943122][T15531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.023794][T17474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.146462][T17474] veth0_vlan: entered promiscuous mode
[  203.154944][T17474] veth1_vlan: entered promiscuous mode
[  203.174624][T17474] veth0_macvtap: entered promiscuous mode
[  203.185065][T17474] veth1_macvtap: entered promiscuous mode
[  203.201130][T17474] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.210786][T17474] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.228730][T15531] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.238647][T15531] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.249262][T15531] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.278628][T15531] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.636514][T17671] IPVS: Error connecting to the multicast addr
[  203.672817][T17673] loop8: detected capacity change from 0 to 512
[  203.689786][T17673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.760380][T10515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.785019][T17678] loop8: detected capacity change from 0 to 128
[  203.816512][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6132'.
[  203.825520][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6132'.
[  203.834557][T17682] netlink: 'syz.8.6132': attribute type 20 has an invalid length.
[  203.846687][T17682] netlink: 'syz.8.6132': attribute type 20 has an invalid length.
[  203.846711][T15546] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.863751][T15546] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.872424][T15546] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.881123][T15546] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.120856][T17703] lo speed is unknown, defaulting to 1000
[  204.532259][T17733] loop5: detected capacity change from 0 to 512
[  204.549223][T17733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.614129][T17243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.637323][T17745] vlan2: entered allmulticast mode
[  204.692879][T15544] smc: removing ib device syz1
[  204.699140][ T1034] syz1: Port: 1 Link DOWN
[  204.842560][T17757] hsr_slave_0: left promiscuous mode
[  204.861479][T17757] hsr_slave_1: left promiscuous mode
[  204.962764][T17767] loop5: detected capacity change from 0 to 512
[  204.980338][T17767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  205.004660][   T29] kauditd_printk_skb: 136 callbacks suppressed
[  205.004679][   T29] audit: type=1400 audit(204.978:7814): avc:  denied  { rename } for  pid=17766 comm="syz.5.6170" name="file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  205.027368][T17767] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  205.043592][T17767] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  205.053615][T17767] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.6170: Failed to acquire dquot type 0
[  205.093599][T17243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  205.148748][T17784] batadv1: entered promiscuous mode
[  205.154145][T17784] batadv1: entered allmulticast mode
[  205.219333][T17769] lo speed is unknown, defaulting to 1000
[  205.313319][T17787] lo speed is unknown, defaulting to 1000
[  205.324367][T17769] chnl_net:caif_netlink_parms(): no params data found
[  205.326214][T17801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  205.370831][   T29] audit: type=1400 audit(205.348:7815): avc:  denied  { read write } for  pid=17802 comm="syz.8.6177" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  205.394523][   T29] audit: type=1400 audit(205.348:7816): avc:  denied  { open } for  pid=17802 comm="syz.8.6177" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  205.418200][   T29] audit: type=1400 audit(205.348:7817): avc:  denied  { ioctl } for  pid=17802 comm="syz.8.6177" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  205.458980][T15530] bridge_slave_1: left allmulticast mode
[  205.464694][T15530] bridge_slave_1: left promiscuous mode
[  205.469485][   T29] audit: type=1326 audit(205.368:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17807 comm="syz.8.6178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e271debe9 code=0x0
[  205.470567][T15530] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.505330][T15530] bridge_slave_0: left allmulticast mode
[  205.511120][T15530] bridge_slave_0: left promiscuous mode
[  205.517263][T15530] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.598111][T15530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.607721][T15530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.617694][T15530] bond0 (unregistering): Released all slaves
[  205.625807][T17769] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.632909][T17769] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.640171][T17769] bridge_slave_0: entered allmulticast mode
[  205.646936][T17769] bridge_slave_0: entered promiscuous mode
[  205.682481][T17818] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.689839][T17818] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.731075][T17818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.741661][T17818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.774256][T17769] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.781501][T17769] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.791396][T17769] bridge_slave_1: entered allmulticast mode
[  205.798215][T17769] bridge_slave_1: entered promiscuous mode
[  205.816798][T15561] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.859788][T15561] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.876273][T15530] hsr_slave_0: left promiscuous mode
[  205.882445][T15530] hsr_slave_1: left promiscuous mode
[  205.890499][T15530] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.898279][T15530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.932908][T15530] team0 (unregistering): Port device team_slave_1 removed
[  205.942758][T15530] team0 (unregistering): Port device team_slave_0 removed
[  205.976365][T17769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.985614][T15561] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.999285][T17769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.018845][T15561] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.038649][T17769] team0: Port device team_slave_0 added
[  206.048477][T17769] team0: Port device team_slave_1 added
[  206.072614][T17769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.079769][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.105841][T17769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.119903][T17769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.126920][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.153203][T17769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.167028][T17815] lo speed is unknown, defaulting to 1000
[  206.167152][T17787] chnl_net:caif_netlink_parms(): no params data found
[  206.218430][T17769] hsr_slave_0: entered promiscuous mode
[  206.224722][T17769] hsr_slave_1: entered promiscuous mode
[  206.230997][T17769] debugfs: 'hsr0' already exists in 'hsr'
[  206.236791][T17769] Cannot create hsr debugfs directory
[  206.312610][T17787] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.319969][T17787] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.327748][T17787] bridge_slave_0: entered allmulticast mode
[  206.334543][T17787] bridge_slave_0: entered promiscuous mode
[  206.341480][T17787] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.348633][T17787] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.358367][T17787] bridge_slave_1: entered allmulticast mode
[  206.367879][T17787] bridge_slave_1: entered promiscuous mode
[  206.380951][T17840] __nla_validate_parse: 5 callbacks suppressed
[  206.380968][T17840] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6185'.
[  206.382582][T17839] serio: Serial port ttyS3
[  206.387506][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6185'.
[  206.426840][T17840] netlink: 'syz.8.6185': attribute type 10 has an invalid length.
[  206.450499][T17787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.466386][T17843] bond0: entered promiscuous mode
[  206.471468][T17843] bond_slave_0: entered promiscuous mode
[  206.477298][T17843] bond_slave_1: entered promiscuous mode
[  206.484162][T17843] bond0: left promiscuous mode
[  206.488989][T17843] bond_slave_0: left promiscuous mode
[  206.494540][T17843] bond_slave_1: left promiscuous mode
[  206.503350][T17840] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  206.521239][T17787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.545551][T17846] loop8: detected capacity change from 0 to 164
[  206.559757][T17846] rock: directory entry would overflow storage
[  206.566059][T17846] rock: sig=0x66, size=4, remaining=3
[  206.592172][T15530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.609510][T17787] team0: Port device team_slave_0 added
[  206.627612][T17787] team0: Port device team_slave_1 added
[  206.645629][T17787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.652697][T17787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.678802][T17787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.689710][   T29] audit: type=1400 audit(206.618:7819): avc:  denied  { read } for  pid=17850 comm="syz.5.6191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  206.689993][T17815] chnl_net:caif_netlink_parms(): no params data found
[  206.723033][T17787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.726027][   T29] audit: type=1400 audit(206.698:7820): avc:  denied  { append } for  pid=17854 comm="syz.8.6192" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  206.730209][T17787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.779344][T17787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.782637][T17855] loop8: detected capacity change from 0 to 1024
[  206.808396][T17855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.844859][T10515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.862926][T17787] hsr_slave_0: entered promiscuous mode
[  206.870022][T17787] hsr_slave_1: entered promiscuous mode
[  206.876201][T17787] debugfs: 'hsr0' already exists in 'hsr'
[  206.881929][T17787] Cannot create hsr debugfs directory
[  206.887511][T17815] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.894631][T17815] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.902127][T17815] bridge_slave_0: entered allmulticast mode
[  206.909081][T17815] bridge_slave_0: entered promiscuous mode
[  206.928078][T17815] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.935167][T17815] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.942707][T17815] bridge_slave_1: entered allmulticast mode
[  206.949132][T17815] bridge_slave_1: entered promiscuous mode
[  206.964234][T17867] pim6reg: entered allmulticast mode
[  206.991126][T17864] pim6reg: left allmulticast mode
[  207.006618][T17769] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  207.016745][T17815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.031604][T17769] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  207.041834][T17815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.056409][T17769] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  207.079311][T17769] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  207.102829][T17815] team0: Port device team_slave_0 added
[  207.118965][T17815] team0: Port device team_slave_1 added
[  207.168514][T17787] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.181455][T17815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.188529][T17815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.214515][T17815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.226729][T17815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.233689][T17815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.259636][T17815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.280845][T15530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.309732][T17815] hsr_slave_0: entered promiscuous mode
[  207.315969][T17815] hsr_slave_1: entered promiscuous mode
[  207.322083][T17815] debugfs: 'hsr0' already exists in 'hsr'
[  207.327918][T17815] Cannot create hsr debugfs directory
[  207.350752][T17787] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.370192][T15530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.373738][   T29] audit: type=1400 audit(207.348:7821): avc:  denied  { unlink } for  pid=10515 comm="syz-executor" name="file1" dev="tmpfs" ino=3484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  207.406955][ T3359] hid_parser_main: 40 callbacks suppressed
[  207.406975][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.420288][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.427772][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.435575][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.443134][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.450612][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.458013][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.465398][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.472945][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.480368][ T3359] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0
[  207.488558][ T3359] hid-generic 0000:0000:0000.005A: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  207.521802][T17787] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.536434][T15530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.585057][T15531] nci: nci_rsp_packet: unknown rsp opcode 0x211
[  207.588793][T17769] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.628663][T17787] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.656277][T17769] 8021q: adding VLAN 0 to HW filter on device team0
[  207.677267][T15546] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.684362][T15546] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.698903][T15547] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.706041][T15547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.728346][T15530] bridge_slave_1: left allmulticast mode
[  207.734042][T15530] bridge_slave_1: left promiscuous mode
[  207.740028][T15530] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.748547][T15530] bridge_slave_0: left allmulticast mode
[  207.754234][T15530] bridge_slave_0: left promiscuous mode
[  207.759943][T15530] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.852021][T15530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.861870][T15530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.871507][T15530] bond0 (unregistering): Released all slaves
[  207.900335][T17815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.921916][T17769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.961203][T17815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.000371][T15530] hsr_slave_0: left promiscuous mode
[  208.006484][T15530] hsr_slave_1: left promiscuous mode
[  208.012117][T15530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.019722][T15530] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.028379][T15530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.035972][T15530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.046786][T15530] veth1_macvtap: left promiscuous mode
[  208.052431][T15530] veth0_macvtap: left promiscuous mode
[  208.060799][T15530] veth1_vlan: left promiscuous mode
[  208.064615][T17898] netlink: 'syz.5.6202': attribute type 39 has an invalid length.
[  208.066176][T15530] veth0_vlan: left promiscuous mode
[  208.148353][T15530] team0 (unregistering): Port device team_slave_1 removed
[  208.158740][T15530] team0 (unregistering): Port device team_slave_0 removed
[  208.206966][T17815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.235503][T17769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.261235][T17815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.323092][T17769] veth0_vlan: entered promiscuous mode
[  208.341493][T17769] veth1_vlan: entered promiscuous mode
[  208.348806][T17787] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  208.371748][T17787] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  208.385190][T17815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  208.394102][T17787] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  208.407805][T17815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  208.418381][T17815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  208.427635][T17787] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  208.441943][T17815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  208.465602][T17769] veth0_macvtap: entered promiscuous mode
[  208.476550][T17769] veth1_macvtap: entered promiscuous mode
[  208.494784][T17769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.511208][T17769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.528837][T15531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.543704][T15531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.555185][T15531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.564578][T15531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.575089][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6205'.
[  208.590471][T17787] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.611327][T17787] 8021q: adding VLAN 0 to HW filter on device team0
[  208.623984][T15530] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.631149][T15530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.640299][T15530] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.647401][T15530] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.732016][T17787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.745067][T17943] serio: Serial port ttyS3
[  208.845836][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6210'.
[  208.901321][T17787] veth0_vlan: entered promiscuous mode
[  208.915166][T17787] veth1_vlan: entered promiscuous mode
[  208.929234][T17787] veth0_macvtap: entered promiscuous mode
[  208.936774][T17787] veth1_macvtap: entered promiscuous mode
[  208.962169][T17787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.971643][T17787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.018571][T15557] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.028756][T15557] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.063033][T15557] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.101933][T15557] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.178925][T17956] Set syz1 is full, maxelem 65536 reached
[  209.277846][T15547] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.293938][T15547] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.302708][T15547] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.325250][T15547] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.353156][T17815] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.401669][T17815] 8021q: adding VLAN 0 to HW filter on device team0
[  209.450564][T15531] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.457702][T15531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.490476][T15531] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.497595][T15531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.713155][T17815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.925204][T17815] veth0_vlan: entered promiscuous mode
[  209.940846][T17815] veth1_vlan: entered promiscuous mode
[  209.965489][T17815] veth0_macvtap: entered promiscuous mode
[  209.977970][T17815] veth1_macvtap: entered promiscuous mode
[  210.007620][T17815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.019855][T17815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.047192][T15530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.074070][T15530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.091926][T15530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.109690][T15530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.139023][T18068] tipc: Started in network mode
[  210.143990][T18068] tipc: Node identity 927b928e675b, cluster identity 4711
[  210.145857][T18071] loop7: detected capacity change from 0 to 128
[  210.151329][T18068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.179482][T18068] tipc: Disabling bearer <eth:syzkaller0>
[  210.266426][T18078] vlan2: entered allmulticast mode
[  210.271616][T18078] dummy0: entered allmulticast mode
[  210.365614][T18091] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6259'.
[  210.500476][   T29] kauditd_printk_skb: 33 callbacks suppressed
[  210.500517][   T29] audit: type=1400 audit(210.478:7855): avc:  denied  { getopt } for  pid=18099 comm="syz.7.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  210.562563][T18107] syzkaller1: entered promiscuous mode
[  210.568130][T18107] syzkaller1: entered allmulticast mode
[  210.792329][T18126] syzkaller0: entered promiscuous mode
[  210.798069][T18126] syzkaller0: entered allmulticast mode
[  210.816090][T15547] syzkaller0: tun_net_xmit 48
[  210.826204][T18126] syzkaller0: tun_net_xmit 1280
[  210.831160][T18126] syzkaller0: create flow: hash 2348737283 index 1
[  210.864268][T18125] syzkaller0: delete flow: hash 2348737283 index 1
[  210.966441][   T29] audit: type=1400 audit(210.948:7856): avc:  denied  { shutdown } for  pid=18119 comm="syz.2.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  211.009526][   T29] audit: type=1400 audit(210.948:7857): avc:  denied  { read } for  pid=18119 comm="syz.2.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  211.443105][T18145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.451693][T18145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.470357][   T29] audit: type=1400 audit(211.448:7858): avc:  denied  { read } for  pid=18144 comm=77DEA305FF07 name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  211.492884][   T29] audit: type=1400 audit(211.448:7859): avc:  denied  { open } for  pid=18144 comm=77DEA305FF07 path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  211.519229][   T29] audit: type=1400 audit(211.498:7860): avc:  denied  { ioctl } for  pid=18144 comm=77DEA305FF07 path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  211.545895][T18149] $H�: renamed from bond0 (while UP)
[  211.553375][T18149] $H�: entered promiscuous mode
[  211.558541][T18149] bond_slave_0: entered promiscuous mode
[  211.564420][T18149] bond_slave_1: entered promiscuous mode
[  211.586199][T18151] syzkaller0: refused to change device tx_queue_len
[  211.599970][T18153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6286'.
[  211.632905][   T29] audit: type=1326 audit(211.608:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.8.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  211.656063][   T29] audit: type=1326 audit(211.608:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.8.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  211.679242][   T29] audit: type=1326 audit(211.608:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.8.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  211.702228][   T29] audit: type=1326 audit(211.608:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.8.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e271debe9 code=0x7ffc0000
[  212.062535][T18189] ref_ctr increment failed for inode: 0x188 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810c00ed40
[  212.073978][T18188] uprobe: syz.5.6302:18188 failed to unregister, leaking uprobe
[  212.173257][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6308'.
[  212.292285][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6315'.
[  212.301393][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6315'.
[  212.533615][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6321'.
[  212.621558][T18236] vhci_hcd: invalid port number 96
[  212.626960][T18236] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  212.693151][T18248] loop8: detected capacity change from 0 to 2048
[  212.720269][T18248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.754734][T18248] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.6330: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  212.812570][T18248] EXT4-fs (loop8): Remounting filesystem read-only
[  212.878116][T10515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.912589][T18262] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6334'.
[  212.941911][T18264] random: crng reseeded on system resumption
[  212.980460][T18269] loop8: detected capacity change from 0 to 1024
[  212.988318][T18269] EXT4-fs: dax option not supported
[  212.998681][T18270] ������: renamed from vlan1 (while UP)
[  213.831651][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6353'.
[  213.940162][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6360'.
[  213.953026][T18323] ip6gre1: entered allmulticast mode
[  214.001460][T18331] bridge: RTM_NEWNEIGH with invalid ether address
[  214.026930][T18335] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6366'.
[  214.059713][T18338] loop5: detected capacity change from 0 to 128
[  214.091035][T18345] loop8: detected capacity change from 0 to 1024
[  214.093525][T18339] vhci_hcd: invalid port number 96
[  214.102605][T18339] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  214.110032][T18345] EXT4-fs: Ignoring removed orlov option
[  214.127389][T18347] bio_check_eod: 74 callbacks suppressed
[  214.127410][T18347] syz.5.6367: attempt to access beyond end of device
[  214.127410][T18347] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128
[  214.134757][T18345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.154265][T18347] syz.5.6367: attempt to access beyond end of device
[  214.154265][T18347] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[  214.211581][T18351] loop7: detected capacity change from 0 to 256
[  214.227156][T18347] syz.5.6367: attempt to access beyond end of device
[  214.227156][T18347] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[  214.308789][T18347] syz.5.6367: attempt to access beyond end of device
[  214.308789][T18347] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[  214.335290][T18347] syz.5.6367: attempt to access beyond end of device
[  214.335290][T18347] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[  214.349720][T18347] syz.5.6367: attempt to access beyond end of device
[  214.349720][T18347] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[  214.363569][T18347] syz.5.6367: attempt to access beyond end of device
[  214.363569][T18347] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128
[  214.389545][T18345] ==================================================================
[  214.397668][T18345] BUG: KCSAN: data-race in filemap_read / filemap_read
[  214.404541][T18345] 
[  214.406885][T18345] read to 0xffff888117dc88e8 of 8 bytes by task 18356 on cpu 1:
[  214.414526][T18345]  filemap_read+0x6f/0xa00
[  214.419007][T18345]  generic_file_read_iter+0x79/0x330
[  214.424308][T18345]  ext4_file_read_iter+0x1cc/0x290
[  214.429448][T18345]  copy_splice_read+0x442/0x660
[  214.434308][T18345]  splice_direct_to_actor+0x290/0x680
[  214.439690][T18345]  do_splice_direct+0xda/0x150
[  214.444458][T18345]  do_sendfile+0x380/0x650
[  214.448894][T18345]  __x64_sys_sendfile64+0x105/0x150
[  214.454109][T18345]  x64_sys_call+0x2bb0/0x2ff0
[  214.458797][T18345]  do_syscall_64+0xd2/0x200
[  214.463322][T18345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.469225][T18345] 
[  214.471551][T18345] write to 0xffff888117dc88e8 of 8 bytes by task 18345 on cpu 0:
[  214.479284][T18345]  filemap_read+0x974/0xa00
[  214.483883][T18345]  generic_file_read_iter+0x79/0x330
[  214.489390][T18345]  ext4_file_read_iter+0x1cc/0x290
[  214.494526][T18345]  copy_splice_read+0x442/0x660
[  214.499382][T18345]  splice_direct_to_actor+0x290/0x680
[  214.504763][T18345]  do_splice_direct+0xda/0x150
[  214.509536][T18345]  do_sendfile+0x380/0x650
[  214.513974][T18345]  __x64_sys_sendfile64+0x105/0x150
[  214.519187][T18345]  x64_sys_call+0x2bb0/0x2ff0
[  214.523875][T18345]  do_syscall_64+0xd2/0x200
[  214.528397][T18345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.534309][T18345] 
[  214.536645][T18345] value changed: 0x0000000000000130 -> 0x0000000000000131
[  214.543754][T18345] 
[  214.546084][T18345] Reported by Kernel Concurrency Sanitizer on:
[  214.552251][T18345] CPU: 0 UID: 0 PID: 18345 Comm: syz.8.6371 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  214.562064][T18345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  214.572128][T18345] ==================================================================
[  214.599722][T18347] syz.5.6367: attempt to access beyond end of device
[  214.599722][T18347] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128
[  214.613383][T18347] syz.5.6367: attempt to access beyond end of device
[  214.613383][T18347] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128
[  214.628898][T18347] syz.5.6367: attempt to access beyond end of device
[  214.628898][T18347] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128
[  214.882909][T10515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.