last executing test programs:

4m55.375886475s ago: executing program 3 (id=583):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8000000000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
io_submit(0x0, 0x0, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=<r5=>0x0)
r6 = syz_open_procfs(r5, &(0x7f00000002c0)='net/packet\x00')
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0)
mount$9p_fd(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}})
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@grpid}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@discard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc")
getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000280), 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES8=r1], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0xf0, 0xe, 0x0, &(0x7f0000000440)="e02742e86c0d85ff9783763a0a00", 0x0, 0x2, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1b)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x28)
r10 = getpgid(0x0)
syz_pidfd_open(r10, 0x0)
syz_open_procfs(r10, &(0x7f0000000080)='smaps\x00')

4m54.820580798s ago: executing program 3 (id=589):
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x800}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1)
semop(0x0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2)
semctl$GETZCNT(0x0, 0x2, 0xf, 0x0)
close(0x3)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x1}, {0x0, 0x8, 0x1000}, {0x3, 0x6, 0x800}, {0x4, 0x3, 0x1800}, {0x2, 0xc, 0x400}, {0x2, 0x8, 0x800}, {0x3, 0x2, 0x1800}, {0x1, 0x8001, 0x1000}, {0x0, 0xe, 0x400}], 0x9, &(0x7f00000004c0))

4m50.704583806s ago: executing program 3 (id=599):
mount(0x0, 0x0, 0x0, 0x900090, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0xfdef, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000900000008004500002400020020001090784200000000000000"], 0x0)

4m50.553848672s ago: executing program 3 (id=601):
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000340)={0x7ff, 0x1, 0x0, 0x9, 0x2, [0x0, 0x579d399e, 0xf75, 0x8e]})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x8, 0x3a16a86a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000200000dfff00000000851000400600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000180000002020782500000000002020207b0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xea, &(0x7f00000006c0)=""/234}, 0x94)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r4}, 0x8)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000c80)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000004a00000000000000ffffffffffffffff08000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff0400000009000000000000000a0000000000000000000000000000000000000000000000000000000000ebffffffffffffff00000000000000000000bc4e66b981b8316f404a9d1a536e2673e6d2ac3213e71915d7ceda652ba57640530968faf2c43d59de145a421b09835b8990fda6f886be22ced8596b2bf24a184e0e80f5550790ec845f457e8f8ae96ef1ac6723a9996a98952377986bdf360f4fd46c08a8a50151503f1d00019d45168b4020449f05cc3ad4bbec2dcc8d3139e2adc0f3b7531c35f6a5c1df902049ba67c4127b7eda637f6bd44e986c6822944df369f45d3d570e5ac655c0495ac12dd92e55"])
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000002e00)}}, {{0x0, 0x0, &(0x7f0000000340)}}], 0x2, 0x2090)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000140)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x80005, 0x6f}, 0x2c)

4m50.038191648s ago: executing program 3 (id=603):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r5, 0x5408, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r6 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r6], 0x14)

4m49.558749248s ago: executing program 3 (id=605):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000007000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000a83c64068d675bc47750213e28000055090100000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x8, 0x52, &(0x7f00000009c0)=""/82, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x5, 0x1, 0x0, 0x2}, 0x10, 0x15b7d, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000b40)=[{0x3, 0x3, 0xc, 0x1}, {0x0, 0x5, 0x7, 0x9}, {0x1, 0x2, 0x6, 0x2}, {0x0, 0x2, 0x8, 0x7}], 0x10, 0xac1}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x2, 0x7) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) (async)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r7=>0x0}) (async, rerun: 32)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xc}]}) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f9ffffffb702000008000000b703000000000000850000000600000095", @ANYRES8=r6, @ANYBLOB="9ee2dff243cddeb14f1890ac8f6f68df7053ad6348fe71e2907b7ac60eb4f55c414f2598c67c38fddb30869bedd19f0ee8bfba7c5e905c32738eb7d3d8b2e6af07d88e1ee468f68411e7e35dbe9e522ce26283be0d51448794f141b84140ca37c127396b72c5e294dfd7dd813f525afc983d31edef875ec53e", @ANYRES32=r0], 0x0, 0xffffffff, 0xfffffffffffffd94, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
clock_nanosleep(0x9, 0x0, 0x0, 0x0) (async)
rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x10, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
geteuid() (async)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38)
r11 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r11, 0x0, 0x0)

4m49.430976599s ago: executing program 32 (id=605):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000007000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000a83c64068d675bc47750213e28000055090100000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x8, 0x52, &(0x7f00000009c0)=""/82, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x5, 0x1, 0x0, 0x2}, 0x10, 0x15b7d, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000b40)=[{0x3, 0x3, 0xc, 0x1}, {0x0, 0x5, 0x7, 0x9}, {0x1, 0x2, 0x6, 0x2}, {0x0, 0x2, 0x8, 0x7}], 0x10, 0xac1}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x2, 0x7) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) (async)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r7=>0x0}) (async, rerun: 32)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xc}]}) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f9ffffffb702000008000000b703000000000000850000000600000095", @ANYRES8=r6, @ANYBLOB="9ee2dff243cddeb14f1890ac8f6f68df7053ad6348fe71e2907b7ac60eb4f55c414f2598c67c38fddb30869bedd19f0ee8bfba7c5e905c32738eb7d3d8b2e6af07d88e1ee468f68411e7e35dbe9e522ce26283be0d51448794f141b84140ca37c127396b72c5e294dfd7dd813f525afc983d31edef875ec53e", @ANYRES32=r0], 0x0, 0xffffffff, 0xfffffffffffffd94, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
clock_nanosleep(0x9, 0x0, 0x0, 0x0) (async)
rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x10, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
geteuid() (async)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38)
r11 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r11, 0x0, 0x0)

4m25.730374372s ago: executing program 0 (id=756):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
socket$inet6(0x10, 0x3, 0x0)

4m25.14014041s ago: executing program 0 (id=759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x1080)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106000, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x100020000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x1, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x4)
pwritev(r2, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)='Aw', 0x2}, {0x0}], 0x2, 0x2, 0x8)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000181401"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x6c840, 0x4)
truncate(&(0x7f0000000000)='./bus\x00', 0x86)
finit_module(r4, 0x0, 0x5)

4m24.1270136s ago: executing program 0 (id=762):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
accept(0xffffffffffffffff, 0x0, 0x0)
chroot(0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r5 = semget$private(0x0, 0x2, 0x10a)
semctl$GETALL(r5, 0x0, 0xd, 0x0)
semop(r5, &(0x7f00000000c0)=[{0x3, 0x6, 0x1000}, {0x1, 0x2, 0x800}], 0x2)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
request_key(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0xffffffffffffffff)
syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x0, 0x0})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, 0x0)
io_uring_setup(0x7, 0x0)

4m21.707498875s ago: executing program 0 (id=768):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000c2dd20b6b5c631000000ba0500001815e600", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008010000b7fdffff00001000850000001e00000018010000206a75250000000000204f00a001a63e6bb9c785f3d3e03b3220207b1af8ff00000000bfa100000000000007010000f8ffffffb702200008000000b7030000ffffff7f850000000600000095f05708c1"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="180000005a000d03000000000000000004100080040005"], 0x18}], 0x1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000008000000000000000040000000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20)
creat(&(0x7f0000000880)='./file0\x00', 0xa5)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xf8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x8, 0x80000000, 0x1, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xfe, 0x2, 0x40, 0x8, 0x2, 0x0, 0x3, 0x2}}, {0x8, 0x2, [0x2, 0x2]}}, {{0x1c, 0x1, {0xbf, 0x0, 0x10, 0x6, 0x2, 0x6, 0x40, 0x5}}, {0xe, 0x2, [0x57, 0x9f, 0x80, 0x400, 0x3]}}, {{0x1c, 0x1, {0x8, 0xc, 0xc, 0xcf75, 0x0, 0xc, 0x9, 0x8}}, {0x14, 0x2, [0x4, 0x8, 0x2, 0x2, 0x5, 0x0, 0x7, 0x9]}}, {{0x1c, 0x1, {0x5, 0x3, 0x4384, 0x7f, 0x1, 0x6, 0xe2, 0x5}}, {0xe, 0x2, [0x6, 0x5, 0xfffc, 0x1ae4, 0x562f]}}]}]}, 0xf8}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
r6 = socket(0xa, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r8, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

4m21.391147387s ago: executing program 0 (id=771):
mount(0x0, 0x0, 0x0, 0x900090, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
syz_emit_ethernet(0xfdef, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000900000008004500002400020020001090784200000000000000"], 0x0)

4m21.31437587s ago: executing program 0 (id=773):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000001000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94)

4m21.208229208s ago: executing program 33 (id=773):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000001000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94)

3m57.613299633s ago: executing program 6 (id=918):
keyctl$session_to_parent(0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x5, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a00000e100000095"], &(0x7f0000000580)='syzkaller\x00', 0x3, 0x97, &(0x7f00000001c0)=""/151, 0x0, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, 0x0, 0x0, {0x2, 0xff}, 0xff}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0xaf25f0b81a7c819b, 0xffffffffffffffff, 0xb3f3b000)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000700000004000000010000060400000063b7abdc1b79e0a50000005f6130"], &(0x7f0000003680)=""/4096, 0x33, 0x1000, 0x1}, 0x28)
socket$vsock_stream(0x28, 0x1, 0x0)

3m54.105146529s ago: executing program 6 (id=930):
mount(0x0, 0x0, 0x0, 0x900090, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f90000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0xfdef, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000900000008004500002400020020001090784200000000000000"], 0x0)

3m53.891405895s ago: executing program 6 (id=931):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r1, 0x3)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0)
epoll_create(0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
socket$inet(0x2, 0x2, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0xa00, 0x4)
socket(0x10, 0x803, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x40)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e657665000028000280"], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x4804) (fail_nth: 2)

3m53.411108405s ago: executing program 6 (id=933):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x21, 0x660f537f, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'fo\x00', 0x19, 0xc, 0x6d}, {@multicast2, 0x4e26, 0x1, 0x1, 0x1}}, 0x44)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000e40)=""/125, &(0x7f0000000200)=0x7d)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0xc, 0x10000, 0x2, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r1, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000400006"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, &(0x7f00000000c0)="f466eaaa2e079760840d60bf785e3e5f4c300db6ba60389071", 0x19, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000280)="6cee91d25ce8d758bf6e66eea47bb59902ad66e49b0d7aa525cab9e42788486bfdb922f6390f88fd2093489b0aafd14564bb8e16f61d7b4a303963f64367692756d425482c031839267c766ddb2405ce6f9c2d03eff11266dc9f668ea27407f8849a9162cb570cc1e321fa0068ba2868a0ddf60f95cd96a8260469afb2df02c1b9681a9e5d1930a45f860fedc0b932ddbdbe6de2b92b93078d8dd1d66625bcde9cfe20fbea42a573cb")

3m52.583210204s ago: executing program 6 (id=946):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000010000004400000020000000000000", @ANYBLOB="0000002000000000000000000000000000000088e048380056b03d0ab8ca183eeac6b3ae4646ba40b89e677a0cac39629daa8782f57cc8baaf5571e789ec0fa60729debdc2b682a55ef6f4ec74e0b07e56e8bd5851d72516945bb909baccfab6503b6739aa4e73ae92bac845", @ANYRES32=0x0], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0xa3)
write$P9_RWALK(r1, 0x0, 0x4a)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xf, 0x8, 0x40, 0xc0, 0x1, 0x6}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x1, 0x2000402)
lseek(r1, 0x3ff, 0x4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_tables_matches\x00')
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6ec)
write$binfmt_elf32(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46800c0400012000000100002002000600010000009389d2a75ca35c8045030000080000000100200002"], 0x78)
close(r3)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000140), 0x1003, r0, 0x0, 0x2000000}, 0x38)

3m52.216414665s ago: executing program 6 (id=950):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x400, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)={r0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001)
r4 = getpgid(0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @mcast2, 0x2}, 0x1c)
fcntl$setsig(r3, 0xa, 0x1c)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000002ec0), r6)
sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x800)
sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='&', 0x1}], 0x1}}], 0x1, 0x40015)

3m52.12741682s ago: executing program 34 (id=950):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x400, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)={r0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001)
r4 = getpgid(0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @mcast2, 0x2}, 0x1c)
fcntl$setsig(r3, 0xa, 0x1c)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000002ec0), r6)
sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002f00)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x800)
sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='&', 0x1}], 0x1}}], 0x1, 0x40015)

3.920789334s ago: executing program 5 (id=2130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

3.795259655s ago: executing program 5 (id=2132):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x81000000)

3.740050265s ago: executing program 5 (id=2133):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)

3.22950539s ago: executing program 7 (id=2144):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x13}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

3.122975218s ago: executing program 7 (id=2145):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0xb8524acb5f9fe5a4)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
r6 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="a5ab45dde4f4000000000070d0ad6d55b4008847450d002c0066020010069078e0000001ac1414790000dd0000000000000000000000eb000000"], 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0xffffffffffffffda}}, 0x40820)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xffef, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12)

3.011826446s ago: executing program 2 (id=2146):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

2.899809485s ago: executing program 2 (id=2147):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

2.785547534s ago: executing program 5 (id=2149):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
write(r1, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @private1, 0x2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x5, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @mcast1}, 0x1c)
recvmmsg(r0, &(0x7f0000007a40)=[{{0x0, 0xffffff46, 0x0, 0xfffffffffffffdb2, &(0x7f0000001040)=""/26, 0x1a}}], 0x1, 0x12002, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'netdevsim0\x00', &(0x7f0000001080)=@ethtool_link_settings={0x4d, 0x7, 0xa, 0x8, 0x2, 0x9, 0xf9, 0x2, 0x5, 0x6b, [0x7ff, 0x3284, 0x3, 0xec3, 0x2, 0x400, 0x1, 0x1], [0x7f, 0x97e, 0x2cd00000]}})
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001000)=0x3, 0x4)

2.638524159s ago: executing program 4 (id=2151):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000200), 0x0}, 0x20)

2.615997372s ago: executing program 5 (id=2152):
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x6c, 0x24, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x5}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x1ff, 0x9708, 0x2, 0x0, 0x5, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x1, 0x6, 0x5, 0x6, 0x2, 0x5, 0x1}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfe, 0x585, &(0x7f0000001500)="$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")
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x842, 0x1ba)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x20044095)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000200)=[0x5, 0x7fffffff], 0x2)
migrate_pages(0x0, 0xfc, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c)
io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
ioperm(0x0, 0x1, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8033, 0xffffffffffffffff, 0x36879000)
poll(&(0x7f0000000100)=[{r1, 0x2000}], 0x1, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)

2.593677107s ago: executing program 4 (id=2153):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x40400)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x10b, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f74", 0x0, 0x31, 0x6000000000000000}, 0x50)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
set_mempolicy(0x1, 0x0, 0x7582)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r7, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r7, 0x86a)
setsockopt$bt_BT_VOICE(r7, 0x112, 0x13, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16], 0x14)

2.553058263s ago: executing program 1 (id=2154):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80"], 0xfdef)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.552346023s ago: executing program 2 (id=2155):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x4003, &(0x7f0000000040)=0xfffffffffffffffd, 0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
unshare(0x22020600)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x20000855, &(0x7f0000000300)={0xa, 0x4e20, 0x80000001, @mcast1}, 0x1c)
recvmmsg(r4, &(0x7f0000007a40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000023, 0x0)

2.502958411s ago: executing program 4 (id=2156):
r0 = socket(0xa, 0x5, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@deltaction={0xd0, 0x31, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x58000}, 0x4040001)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) (async)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24020054}, 0x20000040) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24020054}, 0x20000040)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xfffffe6b, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x35, 0x1, 0x70bd28, 0x25dfdbfb}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x3}, 0x94)

2.500787142s ago: executing program 4 (id=2157):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

1.685237058s ago: executing program 5 (id=2158):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002280)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x9}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x4, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfdfffffe, 0x2000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x400, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x4, 0x0, 0x61d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001, 0xdf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x2, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x8000, 0xfffffffe, 0xe, 0x10000000, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe86, 0x0, 0x0, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x859f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x4, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x3d6451f5, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x34, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0xc, 0xd, 0x3, 0xa, 0x3, 0x1, 0xd, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x444, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0xa, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0x7, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0xffffffff, 0x81, 0x7, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0xa, 0xba, 0x47, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0x80000e01, 0x4, 0x6430, 0xd, 0xb, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0xfff, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0x81, 0x3, 0x0, 0x2, 0x8004, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0xc, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x4, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x4008, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)
dup(r0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$xdp(0x2c, 0x3, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000003440), r4)
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
unshare(0x22020600)
getpgid(r1)
ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffff4}, 0x0)

1.67360809s ago: executing program 1 (id=2159):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)

1.631619117s ago: executing program 4 (id=2160):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x24020400)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
close(r0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r4, 0x400, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000200))
r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r5, &(0x7f0000000180)="e502", 0x2)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
move_pages(r1, 0x0, &(0x7f00000001c0), &(0x7f0000001180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6)
syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000000))

1.487394131s ago: executing program 7 (id=2161):
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

1.486832181s ago: executing program 2 (id=2162):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x29}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="140000000000000029000000430000000102"], 0xffc5}, 0x4004000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x4, 0xffffffff, 0x800}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008841}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x8202, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x15}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r12, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000091408002bbd7000fbdbdf25080001000000000008000100000000000800010002000000c34213c763260389f9ffffffffffffff453784695e825d2b8845137795dcab8ed0beb726f22c032ba733a93741c2c2ec147468ca0871647f6e241b60426c56bb7b03fbf24b05cbf82433db462e05fa5ea0a3b020649163b323c6239c4755ddaec0b64bf1afdbc63f8e4e637033499b1499e31c05eb183679dcefd5411c9c2829bdd40466d7be149a30d71e76b7dda00e06b0cf0098f74e7fd9317e6e1ea3efa36c56cde8ef433861f620731e4e12600b"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x11)
r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
write$sndseq(r13, 0x0, 0x0)
r14 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r14, 0x9, 0x1000000)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

1.486345511s ago: executing program 7 (id=2163):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

1.370177971s ago: executing program 7 (id=2164):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b)

1.167951024s ago: executing program 2 (id=2165):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01004200000000000000240000002400000006000000000000000000000203"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28)

1.097822876s ago: executing program 7 (id=2166):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)

1.088508408s ago: executing program 2 (id=2167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r1=>0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000400), &(0x7f00000005c0)=0x4)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f00000001c0)='./file0\x00', r4, r5)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={r1, r2, r5}, 0xc)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r7}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x80, 0x0, [{@dev}, {@broadcast}, {@local}, {@broadcast}, {@local}, {}, {@initdev}, {@dev}]}})

793.705157ms ago: executing program 1 (id=2168):
socket(0xa, 0x3, 0x87)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
readv(r4, &(0x7f0000000240)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
shutdown(r0, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0xffffffff, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0xb)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000f5ff0000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

505.627045ms ago: executing program 4 (id=2169):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
accept(0xffffffffffffffff, 0x0, 0x0)
chroot(0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
semget$private(0x0, 0x2, 0x10a)

175.21449ms ago: executing program 1 (id=2170):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

48.028652ms ago: executing program 1 (id=2171):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x10000, 0x1000, 0x8000000000000000})
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040))
socket(0x10, 0x80002, 0x0)

0s ago: executing program 1 (id=2172):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x81)
signalfd4(r0, &(0x7f0000000100)={[0xfffffffffffffe00]}, 0x8, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70200001d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01004200000000000000240000002400000006000000000000000000000203"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28)

0s ago: executing program 1 (id=2173):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="12000000f7ffffff008000000200000002400200", @ANYRES32, @ANYBLOB="b509ea0f00000000000000000000000000020000bbae0addf9cf0cebc9800000005fccd0784d12df9f4cb3d721ed3e1fd15f55e59d56515e70345eceaea77f2524706e1c3557467d45732d3c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x29, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) (async)
r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0b7c84970ce7be9, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socket$kcm(0x2b, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r7) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x7e, 0x3, 0x6, 0x0, 0xabe, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x7, 0x7, 0x4, 0x8, 0x2, 0x3bf1, 0x0, 0x3ff, 0x0, 0x489d}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x101, 0x7}, 0x16090, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r9, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r8) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240000000030900020073797a32", @ANYRES16=r4], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) (async)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x800000000000, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYRES8=r6, @ANYRESHEX=r2, @ANYBLOB="715a0300231a05003c0012800b00010069703667726500002c000280140006002001000000000000006b0f5bcda5705cdd0007000000000000000000000000000000010d"], 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) (async)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r12, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)

kernel console output (not intermixed with test programs):

dm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  360.026515][   T28] audit: type=1400 audit(2000000353.558:1473): avc:  denied  { perfmon } for  pid=9518 comm="syz.4.1563" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  360.091140][ T9523] 9p: Could not find request transport: f
[  360.103750][ T9517] xt_hashlimit: size too large, truncated to 1048576
[  360.113090][   T28] audit: type=1400 audit(2000000353.588:1474): avc:  denied  { mount } for  pid=9516 comm="syz.2.1562" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  360.113558][ T9512] loop5: detected capacity change from 0 to 1024
[  360.149163][   T28] audit: type=1400 audit(2000000353.608:1475): avc:  denied  { read write } for  pid=9516 comm="syz.2.1562" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  360.149270][   T28] audit: type=1400 audit(2000000353.608:1476): avc:  denied  { open } for  pid=9516 comm="syz.2.1562" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  360.149358][   T28] audit: type=1400 audit(2000000353.628:1477): avc:  denied  { create } for  pid=9516 comm="syz.2.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  360.149456][   T28] audit: type=1400 audit(2000000353.648:1478): avc:  denied  { write } for  pid=9516 comm="syz.2.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  360.404742][ T9512] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  360.543454][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  360.572917][ T9530] loop5: detected capacity change from 0 to 256
[  360.621989][ T9530] FAT-fs (loop5): codepage cp857 not found
[  360.841385][ T9534] netlink: 'syz.4.1566': attribute type 13 has an invalid length.
[  360.857076][ T9534] netlink: 'syz.4.1566': attribute type 17 has an invalid length.
[  360.932779][ T9539] loop5: detected capacity change from 0 to 512
[  361.006889][ T9539] FAT-fs (loop5): Directory bread(block 199916) failed
[  361.014049][ T9539] FAT-fs (loop5): Directory bread(block 199917) failed
[  361.021110][ T9539] FAT-fs (loop5): Directory bread(block 199918) failed
[  361.028801][ T9539] FAT-fs (loop5): Directory bread(block 199919) failed
[  361.037391][ T9539] FAT-fs (loop5): Directory bread(block 199920) failed
[  361.044568][ T9539] FAT-fs (loop5): Directory bread(block 199921) failed
[  361.051601][ T9539] FAT-fs (loop5): Directory bread(block 199922) failed
[  361.058717][ T9539] FAT-fs (loop5): Directory bread(block 199923) failed
[  361.073154][ T9539] FAT-fs (loop5): Directory bread(block 199916) failed
[  361.080529][ T9539] FAT-fs (loop5): Directory bread(block 199917) failed
[  361.583469][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  361.600310][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.626942][ T9550] loop2: detected capacity change from 0 to 128
[  361.682388][ T9534] 8021q: adding VLAN 0 to HW filter on device team0
[  361.696426][ T9550] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  361.726372][ T9534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.001401][   T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  362.210730][ T9569] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1576'.
[  362.623479][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  363.051648][   T28] kauditd_printk_skb: 56 callbacks suppressed
[  363.051666][   T28] audit: type=1400 audit(2000000356.638:1535): avc:  denied  { create } for  pid=9554 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  363.232379][   T28] audit: type=1400 audit(2000000356.648:1536): avc:  denied  { setopt } for  pid=9554 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  363.290073][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1576'.
[  363.335823][ T9579] loop2: detected capacity change from 0 to 256
[  363.376572][   T28] audit: type=1400 audit(2000000356.688:1537): avc:  denied  { bind } for  pid=9554 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  363.409088][   T28] audit: type=1400 audit(2000000356.688:1538): avc:  denied  { create } for  pid=9554 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  363.663459][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  364.045375][ T9579] FAT-fs (loop2): codepage cp857 not found
[  364.065635][ T9589] FAULT_INJECTION: forcing a failure.
[  364.065635][ T9589] name failslab, interval 1, probability 0, space 0, times 0
[  364.079130][ T9589] CPU: 1 UID: 0 PID: 9589 Comm: syz.7.1579 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  364.079169][ T9589] Tainted: [W]=WARN
[  364.079204][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  364.079249][ T9589] Call Trace:
[  364.079256][ T9589]  <TASK>
[  364.079265][ T9589]  __dump_stack+0x1d/0x30
[  364.079316][ T9589]  dump_stack_lvl+0x95/0xd0
[  364.079350][ T9589]  dump_stack+0x15/0x1b
[  364.079376][ T9589]  should_fail_ex+0x263/0x280
[  364.079404][ T9589]  should_failslab+0x8c/0xb0
[  364.079452][ T9589]  __kmalloc_noprof+0xb8/0x4d0
[  364.079488][ T9589]  ? memcg_list_lru_alloc+0x308/0x4f0
[  364.079587][ T9589]  memcg_list_lru_alloc+0x308/0x4f0
[  364.079614][ T9589]  __memcg_slab_post_alloc_hook+0x1a6/0x540
[  364.079643][ T9589]  kmem_cache_alloc_lru_noprof+0x1eb/0x400
[  364.079730][ T9589]  ? __d_alloc+0x37/0x340
[  364.079760][ T9589]  __d_alloc+0x37/0x340
[  364.079795][ T9589]  d_make_root+0x28/0x70
[  364.079826][ T9589]  mqueue_fill_super+0x194/0x1d0
[  364.079858][ T9589]  ? __pfx_mqueue_fill_super+0x10/0x10
[  364.079896][ T9589]  get_tree_nodev+0x83/0x100
[  364.079930][ T9589]  mqueue_get_tree+0x5d/0x80
[  364.080012][ T9589]  vfs_get_tree+0x57/0x1d0
[  364.080082][ T9589]  fc_mount_longterm+0x18/0xb0
[  364.080109][ T9589]  mq_init_ns+0x2db/0x370
[  364.080133][ T9589]  copy_ipcs+0x26e/0x460
[  364.080177][ T9589]  create_new_namespaces+0x12a/0x440
[  364.080214][ T9589]  unshare_nsproxy_namespaces+0x115/0x150
[  364.080265][ T9589]  ksys_unshare+0x402/0x700
[  364.080419][ T9589]  ? ksys_write+0x194/0x1a0
[  364.080453][ T9589]  __x64_sys_unshare+0x1f/0x30
[  364.080493][ T9589]  x64_sys_call+0x1cef/0x3020
[  364.080592][ T9589]  do_syscall_64+0x12c/0x3b0
[  364.080629][ T9589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.080655][ T9589] RIP: 0033:0x7f50649cc819
[  364.080677][ T9589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.080765][ T9589] RSP: 002b:00007f50633e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  364.080796][ T9589] RAX: ffffffffffffffda RBX: 00007f5064c46180 RCX: 00007f50649cc819
[  364.080841][ T9589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  364.080854][ T9589] RBP: 00007f50633e5090 R08: 0000000000000000 R09: 0000000000000000
[  364.080867][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  364.080879][ T9589] R13: 00007f5064c46218 R14: 00007f5064c46180 R15: 00007ffeb0f15608
[  364.080904][ T9589]  </TASK>
[  364.541425][ T9600] loop4: detected capacity change from 0 to 512
[  364.637505][ T9600] FAT-fs (loop4): Directory bread(block 199916) failed
[  364.644645][ T9600] FAT-fs (loop4): Directory bread(block 199917) failed
[  364.651920][ T9600] FAT-fs (loop4): Directory bread(block 199918) failed
[  364.659125][ T9600] FAT-fs (loop4): Directory bread(block 199919) failed
[  364.667805][ T9600] FAT-fs (loop4): Directory bread(block 199920) failed
[  364.674885][ T9600] FAT-fs (loop4): Directory bread(block 199921) failed
[  364.681981][ T9600] FAT-fs (loop4): Directory bread(block 199922) failed
[  364.689047][ T9600] FAT-fs (loop4): Directory bread(block 199923) failed
[  364.703439][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  364.827895][ T9600] FAT-fs (loop4): Directory bread(block 199916) failed
[  364.835151][ T9600] FAT-fs (loop4): Directory bread(block 199917) failed
[  365.012605][ T9605] netlink: 'syz.2.1583': attribute type 13 has an invalid length.
[  365.042462][   T28] audit: type=1400 audit(2000000358.638:1539): avc:  denied  { name_bind } for  pid=9603 comm="syz.7.1584" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  365.147005][ T9605] netlink: 'syz.2.1583': attribute type 17 has an invalid length.
[  365.160172][   T28] audit: type=1400 audit(2000000358.668:1540): avc:  denied  { node_bind } for  pid=9603 comm="syz.7.1584" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  365.200948][   T28] audit: type=1400 audit(2000000358.788:1541): avc:  denied  { read write } for  pid=9603 comm="syz.7.1584" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  365.238537][ T3537] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  365.258377][ T3537] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  365.302059][   T28] audit: type=1400 audit(2000000358.788:1542): avc:  denied  { open } for  pid=9603 comm="syz.7.1584" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  365.360908][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1584'.
[  365.412446][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.446901][ T9605] 8021q: adding VLAN 0 to HW filter on device team0
[  365.509060][ T9605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.685776][   T28] audit: type=1400 audit(2000000359.288:1543): avc:  denied  { execute } for  pid=9616 comm="syz.7.1588" name="file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  365.743448][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  365.767670][   T28] audit: type=1400 audit(2000000359.308:1544): avc:  denied  { execute_no_trans } for  pid=9616 comm="syz.7.1588" path="/115/file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  365.840303][ T9617] loop7: detected capacity change from 0 to 8192
[  365.888260][ T9617]  loop7: p1 < > p2 p4 < p5 >
[  365.895800][ T9617] loop7: partition table partially beyond EOD, truncated
[  365.936899][ T9617] loop7: p1 start 134217728 is beyond EOD, truncated
[  365.952990][ T9617] loop7: p2 size 591360 extends beyond EOD, truncated
[  365.976908][ T9617] loop7: p5 size 591360 extends beyond EOD, truncated
[  366.118338][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  366.131952][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  366.160406][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  366.387348][ T9619] loop4: detected capacity change from 0 to 512
[  366.783503][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  366.906604][ T9619] FAT-fs (loop4): Directory bread(block 199916) failed
[  366.948126][ T9619] FAT-fs (loop4): Directory bread(block 199917) failed
[  367.008085][ T9619] FAT-fs (loop4): Directory bread(block 199918) failed
[  367.021916][ T9548] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  367.050402][ T9548] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  367.078466][ T9619] FAT-fs (loop4): Directory bread(block 199919) failed
[  367.106730][ T9619] FAT-fs (loop4): Directory bread(block 199920) failed
[  367.140374][ T9619] FAT-fs (loop4): Directory bread(block 199921) failed
[  367.210279][ T9619] FAT-fs (loop4): Directory bread(block 199922) failed
[  367.252244][ T9619] FAT-fs (loop4): Directory bread(block 199923) failed
[  367.315547][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1597'.
[  367.338758][ T9619] FAT-fs (loop4): Directory bread(block 199916) failed
[  367.498839][ T9656] loop2: detected capacity change from 0 to 512
[  367.512465][ T9656] FAT-fs (loop2): Directory bread(block 199916) failed
[  367.521038][ T9656] FAT-fs (loop2): Directory bread(block 199917) failed
[  367.528262][ T9656] FAT-fs (loop2): Directory bread(block 199918) failed
[  367.535699][ T9656] FAT-fs (loop2): Directory bread(block 199919) failed
[  367.542717][ T9656] FAT-fs (loop2): Directory bread(block 199920) failed
[  367.551417][ T9656] FAT-fs (loop2): Directory bread(block 199921) failed
[  367.558705][ T9656] FAT-fs (loop2): Directory bread(block 199922) failed
[  367.565858][ T9656] FAT-fs (loop2): Directory bread(block 199923) failed
[  367.578471][ T9656] FAT-fs (loop2): Directory bread(block 199916) failed
[  367.585669][ T9656] FAT-fs (loop2): Directory bread(block 199917) failed
[  367.803235][ T9619] FAT-fs (loop4): Directory bread(block 199917) failed
[  367.823440][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  367.951801][   T35] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  367.984338][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1598'.
[  368.074725][   T35] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  368.091629][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  368.091705][   T28] audit: type=1400 audit(2000000361.648:1549): avc:  denied  { create } for  pid=9658 comm="syz.7.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  368.142081][ T5086] Bluetooth: hci0: Frame reassembly failed (-84)
[  368.204430][   T28] audit: type=1400 audit(2000000361.738:1550): avc:  denied  { setopt } for  pid=9658 comm="syz.7.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  368.233036][ T9663] fido_id[9663]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  368.418175][ T3400] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  368.442909][ T3400] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  368.484415][ T9667] syzkaller0: tun_chr_ioctl cmd 1074025677
[  368.500773][ T9667] syzkaller0: linktype set to 825
[  368.511545][   T28] audit: type=1400 audit(2000000362.108:1551): avc:  denied  { append } for  pid=9666 comm="syz.5.1602" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  368.598398][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1603'.
[  368.863455][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  368.937454][ T9692] loop5: detected capacity change from 0 to 128
[  368.950607][ T9692] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  368.967912][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1610'.
[  369.143251][ T9705] loop4: detected capacity change from 0 to 512
[  369.195721][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'.
[  369.229242][ T5424] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  369.280263][ T9705] FAT-fs (loop4): Directory bread(block 199916) failed
[  369.289051][ T9705] FAT-fs (loop4): Directory bread(block 199917) failed
[  369.296286][ T9705] FAT-fs (loop4): Directory bread(block 199918) failed
[  369.303231][ T9705] FAT-fs (loop4): Directory bread(block 199919) failed
[  369.310298][ T9705] FAT-fs (loop4): Directory bread(block 199920) failed
[  369.318850][ T9705] FAT-fs (loop4): Directory bread(block 199921) failed
[  369.326211][ T9705] FAT-fs (loop4): Directory bread(block 199922) failed
[  369.333794][ T9705] FAT-fs (loop4): Directory bread(block 199923) failed
[  369.346369][ T9705] FAT-fs (loop4): Directory bread(block 199916) failed
[  369.353511][ T9705] FAT-fs (loop4): Directory bread(block 199917) failed
[  369.903438][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  369.975465][   T28] audit: type=1400 audit(2000000363.578:1552): avc:  denied  { accept } for  pid=9715 comm="syz.4.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  370.131305][ T9726] loop4: detected capacity change from 0 to 512
[  370.140336][ T9726] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  370.143826][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  370.152347][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  370.180797][ T9726] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  370.196674][ T9726] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1624: bad orphan inode 4
[  370.249397][ T9726] loop4: lost filesystem error report for type 5 error -117
[  370.251516][ T9726] EXT4-fs (loop4): 1 orphan inode deleted
[  370.258916][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  370.258953][    C0] EXT4-fs (loop4): initial error at time 2000000363: ext4_orphan_get:1423
[  370.259007][    C0] EXT4-fs (loop4): last error at time 2000000363: ext4_orphan_get:1423
[  370.291071][ T9726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.305307][   T28] audit: type=1400 audit(2000000363.908:1553): avc:  denied  { mount } for  pid=9725 comm="syz.4.1624" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  370.519898][ T7199] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  370.570448][ T7199] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  370.943458][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  371.056369][ T3709] Bluetooth: hci1: command 0x1003 tx timeout
[  371.104543][ T4963] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  371.213019][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1626'.
[  371.310611][ T9741] loop2: detected capacity change from 0 to 128
[  371.370554][ T9741] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  371.417711][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.428648][   T28] audit: type=1400 audit(2000000365.018:1554): avc:  denied  { unmount } for  pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  371.597365][ T9747] netlink: 'syz.4.1628': attribute type 21 has an invalid length.
[  371.636421][ T9747] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1628'.
[  371.654164][ T8783] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  371.671132][ T9747] netlink: 'syz.4.1628': attribute type 5 has an invalid length.
[  371.760783][ T9747] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1628'.
[  371.776154][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  371.782861][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  371.937884][ T9756] vcan0: tx drop: invalid sa for name 0xfeffffffffffffff
[  371.945936][   T28] audit: type=1400 audit(2000000365.538:1555): avc:  denied  { ioctl } for  pid=9750 comm="syz.2.1631" path="socket:[29397]" dev="sockfs" ino=29397 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  371.983455][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  372.168212][   T28] audit: type=1400 audit(2000000365.538:1556): avc:  denied  { bind } for  pid=9750 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  372.869918][   T28] audit: type=1400 audit(2000000366.468:1557): avc:  denied  { cpu } for  pid=9757 comm="syz.7.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  373.023529][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  373.205074][ T9766] loop7: detected capacity change from 0 to 512
[  373.246216][ T9766] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  373.300565][ T9766] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  373.335498][ T9766] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1635: bad orphan inode 4
[  373.381573][ T9766] loop7: lost filesystem error report for type 5 error -117
[  373.383178][ T9766] EXT4-fs (loop7): 1 orphan inode deleted
[  373.390968][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  373.390994][    C1] EXT4-fs (loop7): initial error at time 2000000366: ext4_orphan_get:1423
[  373.391033][    C1] EXT4-fs (loop7): last error at time 2000000366: ext4_orphan_get:1423
[  373.516910][ T9766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.920005][ T4963] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  373.926275][ T3709] Bluetooth: hci0: command 0x1003 tx timeout
[  374.068075][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  374.206667][ T9778] loop2: detected capacity change from 0 to 512
[  374.371239][ T9778] FAT-fs (loop2): Directory bread(block 199916) failed
[  374.415269][ T9778] FAT-fs (loop2): Directory bread(block 199917) failed
[  374.511638][ T9778] FAT-fs (loop2): Directory bread(block 199918) failed
[  374.537205][ T9781] loop4: detected capacity change from 0 to 512
[  374.560771][ T9778] FAT-fs (loop2): Directory bread(block 199919) failed
[  374.572181][ T9781] FAT-fs (loop4): Directory bread(block 199916) failed
[  374.598479][ T9778] FAT-fs (loop2): Directory bread(block 199920) failed
[  374.611014][ T9781] FAT-fs (loop4): Directory bread(block 199917) failed
[  374.636459][ T9778] FAT-fs (loop2): Directory bread(block 199921) failed
[  374.649522][ T9781] FAT-fs (loop4): Directory bread(block 199918) failed
[  374.668531][ T9778] FAT-fs (loop2): Directory bread(block 199922) failed
[  374.680648][ T9781] FAT-fs (loop4): Directory bread(block 199919) failed
[  374.703528][ T9778] FAT-fs (loop2): Directory bread(block 199923) failed
[  374.711039][ T9781] FAT-fs (loop4): Directory bread(block 199920) failed
[  374.744957][ T9781] FAT-fs (loop4): Directory bread(block 199921) failed
[  374.770745][ T9781] FAT-fs (loop4): Directory bread(block 199922) failed
[  374.799161][ T9778] xt_hashlimit: size too large, truncated to 1048576
[  374.809961][ T9781] FAT-fs (loop4): Directory bread(block 199923) failed
[  374.990599][ T7268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.103434][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  375.144648][ T9781] xt_hashlimit: size too large, truncated to 1048576
[  375.342717][ T9792] loop2: detected capacity change from 0 to 256
[  375.349410][   T28] audit: type=1400 audit(2000000368.938:1558): avc:  denied  { watch watch_reads } for  pid=9793 comm="syz.7.1644" path="/proc/398/task" dev="proc" ino=29514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  375.408849][ T9792] FAT-fs (loop2): codepage cp857 not found
[  375.453929][   T28] audit: type=1400 audit(2000000369.048:1559): avc:  denied  { mounton } for  pid=9793 comm="syz.7.1644" path="/130/file0" dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  375.488549][ T9800] 9p: Bad value for 'rfdno'
[  375.556382][   T28] audit: type=1400 audit(2000000369.088:1560): avc:  denied  { name_bind } for  pid=9791 comm="syz.2.1643" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  375.627197][ T9802] netlink: 'syz.1.1646': attribute type 13 has an invalid length.
[  375.654168][ T9802] netlink: 'syz.1.1646': attribute type 17 has an invalid length.
[  375.717978][ T9802] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.739555][ T9802] 8021q: adding VLAN 0 to HW filter on device team0
[  375.789751][ T9802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.924497][ T7047] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  375.936468][ T7047] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  375.956651][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1649'.
[  376.028520][ T9816] loop2: detected capacity change from 0 to 512
[  376.037157][ T9816] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  376.062856][ T9816] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  376.071767][ T9816] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1650: bad orphan inode 4
[  376.082252][ T9816] loop2: lost filesystem error report for type 5 error -117
[  376.082406][ T9816] EXT4-fs (loop2): 1 orphan inode deleted
[  376.089855][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  376.089909][    C1] EXT4-fs (loop2): initial error at time 2000000369: ext4_orphan_get:1423
[  376.089933][    C1] EXT4-fs (loop2): last error at time 2000000369: ext4_orphan_get:1423
[  376.124944][ T9816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.143482][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  376.221642][ T9819] loop7: detected capacity change from 0 to 128
[  376.255485][ T9819] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  376.297595][ T9819] ªªªªªª: renamed from vlan0
[  376.307140][   T28] audit: type=1400 audit(2000000369.908:1561): avc:  denied  { relabelfrom } for  pid=9818 comm="syz.7.1651" name="NETLINK" dev="sockfs" ino=29993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  376.333806][   T28] audit: type=1400 audit(2000000369.908:1562): avc:  denied  { relabelto } for  pid=9818 comm="syz.7.1651" name="NETLINK" dev="sockfs" ino=29993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  377.200378][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  377.571832][ T3693] Bluetooth: hci1: Frame reassembly failed (-84)
[  377.579509][ T3693] Bluetooth: hci1: Frame reassembly failed (-84)
[  377.629538][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.659930][ T3693] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  377.709295][ T9839] loop2: detected capacity change from 0 to 128
[  377.741665][ T9839] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  377.829013][ T9845] loop7: detected capacity change from 0 to 256
[  377.840914][   T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  377.884942][ T9845] FAT-fs (loop7): codepage cp857 not found
[  377.905336][ T7047] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  377.929716][   T28] audit: type=1400 audit(2000000371.528:1563): avc:  denied  { create } for  pid=9849 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  377.935664][ T7047] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  377.974624][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'.
[  377.982818][   T28] audit: type=1400 audit(2000000371.558:1564): avc:  denied  { bind } for  pid=9849 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  378.006752][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  378.008337][ T4963] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  378.043552][   T28] audit: type=1400 audit(2000000371.558:1565): avc:  denied  { listen } for  pid=9849 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  378.065224][   T28] audit: type=1400 audit(2000000371.558:1566): avc:  denied  { write } for  pid=9849 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  378.085661][   T28] audit: type=1400 audit(2000000371.558:1567): avc:  denied  { accept } for  pid=9849 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  378.153204][ T9862] netlink: 4204 bytes leftover after parsing attributes in process `syz.4.1664'.
[  378.212157][ T9864] loop4: detected capacity change from 0 to 512
[  378.223501][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  378.269237][ T9864] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  378.279197][ T9864] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  378.287803][ T9864] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1665: bad orphan inode 4
[  378.299484][ T9864] loop4: lost filesystem error report for type 5 error -117
[  378.299647][ T9864] EXT4-fs (loop4): 1 orphan inode deleted
[  378.307586][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  378.307629][    C0] EXT4-fs (loop4): initial error at time 2000000371: ext4_orphan_get:1423
[  378.307682][    C0] EXT4-fs (loop4): last error at time 2000000371: ext4_orphan_get:1423
[  378.339457][ T9864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.392091][ T9869] loop7: detected capacity change from 0 to 512
[  379.263444][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  379.388884][ T9869] syz.7.1666: attempt to access beyond end of device
[  379.388884][ T9869] loop7: rw=34817, sector=352, nr_sectors = 966 limit=512
[  379.584846][ T4963] Bluetooth: hci1: command 0x1003 tx timeout
[  379.591161][ T3709] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  379.659434][   T49] kworker/u8:3: attempt to access beyond end of device
[  379.659434][   T49] loop7: rw=1, sector=1320, nr_sectors = 4288 limit=512
[  379.722086][   T49] kworker/u8:3: attempt to access beyond end of device
[  379.722086][   T49] loop7: rw=1, sector=5608, nr_sectors = 2048 limit=512
[  379.762459][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.827480][   T49] kworker/u8:3: attempt to access beyond end of device
[  379.827480][   T49] loop7: rw=1, sector=7656, nr_sectors = 2048 limit=512
[  379.894610][   T49] kworker/u8:3: attempt to access beyond end of device
[  379.894610][   T49] loop7: rw=1, sector=9704, nr_sectors = 2048 limit=512
[  379.945692][   T49] kworker/u8:3: attempt to access beyond end of device
[  379.945692][   T49] loop7: rw=1, sector=11752, nr_sectors = 2048 limit=512
[  379.961221][ T9885] syzkaller0: tun_chr_ioctl cmd 1074025677
[  379.975763][ T9885] syzkaller0: linktype set to 825
[  379.995816][ T9887] loop5: detected capacity change from 0 to 1024
[  380.007661][   T49] kworker/u8:3: attempt to access beyond end of device
[  380.007661][   T49] loop7: rw=1, sector=13800, nr_sectors = 2048 limit=512
[  380.065579][   T49] kworker/u8:3: attempt to access beyond end of device
[  380.065579][   T49] loop7: rw=1, sector=15848, nr_sectors = 616 limit=512
[  380.196088][ T9887] EXT4-fs: Mount option(s) incompatible with ext3
[  380.303448][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  380.345709][ T9894] loop4: detected capacity change from 0 to 4096
[  380.378289][ T9894] ext4: Unknown parameter 'appraise'
[  380.404964][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  380.404982][   T28] audit: type=1400 audit(2000000373.998:1576): avc:  denied  { read } for  pid=9893 comm="syz.4.1675" dev="sockfs" ino=30136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  380.445169][ T9897] tmpfs: Bad value for 'mpol'
[  380.505539][   T28] audit: type=1400 audit(2000000374.068:1577): avc:  denied  { create } for  pid=9895 comm="syz.7.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  380.541287][ T9901] loop4: detected capacity change from 0 to 256
[  380.600415][   T28] audit: type=1400 audit(2000000374.078:1578): avc:  denied  { connect } for  pid=9895 comm="syz.7.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  380.634046][ T9887] loop5: detected capacity change from 0 to 512
[  380.677094][ T9901] FAT-fs (loop4): codepage cp857 not found
[  380.684229][ T9904] loop7: detected capacity change from 0 to 512
[  380.690480][ T9887] EXT4-fs: Ignoring removed i_version option
[  380.693999][   T28] audit: type=1400 audit(2000000374.078:1579): avc:  denied  { ioctl } for  pid=9895 comm="syz.7.1668" path="socket:[30750]" dev="sockfs" ino=30750 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  380.755338][ T9887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.783045][ T9887] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  380.794685][   T28] audit: type=1400 audit(2000000374.158:1580): avc:  denied  { setopt } for  pid=9890 comm="syz.2.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  380.833063][ T9904] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  380.927027][ T9904] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  380.977722][   T28] audit: type=1400 audit(2000000374.558:1581): avc:  denied  { mount } for  pid=9886 comm="syz.5.1672" name="/" dev="configfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  381.007645][ T9904] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1677: bad orphan inode 4
[  381.025059][ T9904] loop7: lost filesystem error report for type 5 error -117
[  381.026766][ T9904] EXT4-fs (loop7): 1 orphan inode deleted
[  381.034224][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  381.034261][    C1] EXT4-fs (loop7): initial error at time 2000000374: ext4_orphan_get:1423
[  381.034289][    C1] EXT4-fs (loop7): last error at time 2000000374: ext4_orphan_get:1423
[  381.067922][   T28] audit: type=1400 audit(2000000374.668:1582): avc:  denied  { mounton } for  pid=9886 comm="syz.5.1672" path="/proc/606/task" dev="proc" ino=30772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  381.092909][ T9904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.136683][   T28] audit: type=1400 audit(2000000374.708:1583): avc:  denied  { mount } for  pid=9886 comm="syz.5.1672" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  381.169655][   T28] audit: type=1400 audit(2000000374.768:1584): avc:  denied  { search } for  pid=9886 comm="syz.5.1672" name="/" dev="configfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  381.260817][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.262793][   T28] audit: type=1400 audit(2000000374.768:1585): avc:  denied  { search } for  pid=9886 comm="syz.5.1672" name="/" dev="configfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  381.343527][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  381.404713][ T9913] loop5: detected capacity change from 0 to 512
[  381.477853][ T9920] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  381.568792][ T7268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.664434][ T5086] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  381.804138][ T9921] syz.5.1679: attempt to access beyond end of device
[  381.804138][ T9921] loop5: rw=34817, sector=352, nr_sectors = 966 limit=512
[  382.032939][  T898] kworker/u8:6: attempt to access beyond end of device
[  382.032939][  T898] loop5: rw=1, sector=1320, nr_sectors = 3664 limit=512
[  382.218867][ T9941] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  382.349432][ T5086] Bluetooth: hci0: Frame reassembly failed (-84)
[  382.383479][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  382.487438][  T898] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  383.028654][ T9953] set_capacity_and_notify: 2 callbacks suppressed
[  383.028982][ T9953] loop2: detected capacity change from 0 to 512
[  383.423430][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  383.435675][ T9953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.531164][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.601764][ T9961] loop5: detected capacity change from 0 to 764
[  383.645945][ T9961] iso9660: Unknown parameter 'GPL'
[  384.023032][ T9971] xfrm0 speed is unknown, defaulting to 1000
[  384.066372][ T9971] xfrm0 speed is unknown, defaulting to 1000
[  384.076370][ T9971] xfrm0 speed is unknown, defaulting to 1000
[  384.383431][ T4963] Bluetooth: hci0: command 0x1003 tx timeout
[  384.385292][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  384.463458][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  384.603632][ T3400] xfrm0 speed is unknown, defaulting to 1000
[  384.615503][ T9971] infiniband syz1: set down
[  384.638479][ T9971] infiniband syz1: added xfrm0
[  384.658654][ T9986] loop7: detected capacity change from 0 to 512
[  384.671666][ T9985] loop2: detected capacity change from 0 to 512
[  384.686775][ T9985] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  384.715094][ T9986] FAT-fs (loop7): Directory bread(block 199916) failed
[  384.737990][ T9985] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  384.756788][ T9986] FAT-fs (loop7): Directory bread(block 199917) failed
[  384.772335][ T9985] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1703: bad orphan inode 4
[  384.784050][ T9986] FAT-fs (loop7): Directory bread(block 199918) failed
[  384.789525][ T9985] loop2: lost filesystem error report for type 5 error -117
[  384.792868][ T9985] EXT4-fs (loop2): 1 orphan inode deleted
[  384.794670][ T9986] FAT-fs (loop7): Directory bread(block 199919) failed
[  384.800242][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  384.800258][    C1] EXT4-fs (loop2): initial error at time 2000000378: ext4_orphan_get:1423
[  384.808153][ T9986] FAT-fs (loop7): Directory bread(block 199920) failed
[  384.813437][    C1] 
[  384.820029][ T9986] FAT-fs (loop7): Directory bread(block 199921) failed
[  384.828739][    C1] EXT4-fs (loop2): last error at time 2000000378: ext4_orphan_get:1423
[  384.838110][ T9971] RDS/IB: syz1: added
[  384.847585][ T9986] FAT-fs (loop7): Directory bread(block 199922) failed
[  384.868361][ T9986] FAT-fs (loop7): Directory bread(block 199923) failed
[  384.876036][ T9985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.896428][ T9971] smc: adding ib device syz1 with port count 1
[  384.902668][ T9971] smc:    ib device syz1 port 1 has no pnetid
[  384.911113][ T3400] xfrm0 speed is unknown, defaulting to 1000
[  384.917604][ T9971] xfrm0 speed is unknown, defaulting to 1000
[  384.953826][ T9986] xt_hashlimit: size too large, truncated to 1048576
[  385.043153][ T9971] xfrm0 speed is unknown, defaulting to 1000
[  385.163405][ T9971] xfrm0 speed is unknown, defaulting to 1000
[  385.503441][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  385.805294][ T9971] xfrm0 speed is unknown, defaulting to 1000
[  385.859835][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.874049][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1706'.
[  385.972254][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  385.972274][   T28] audit: type=1326 audit(2000000379.568:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.046683][ T9971] xfrm0 speed is unknown, defaulting to 1000
[  386.077834][   T28] audit: type=1326 audit(2000000379.568:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.134650][   T28] audit: type=1326 audit(2000000379.568:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.210263][   T28] audit: type=1326 audit(2000000379.568:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.288898][   T28] audit: type=1326 audit(2000000379.568:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.315194][T10017] netlink: 'syz.4.1710': attribute type 1 has an invalid length.
[  386.346066][T10017] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1710'.
[  386.359640][   T28] audit: type=1326 audit(2000000379.568:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.414927][   T28] audit: type=1326 audit(2000000379.568:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.457491][   T28] audit: type=1326 audit(2000000379.568:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.496538][T10022] loop2: detected capacity change from 0 to 128
[  386.510999][   T28] audit: type=1326 audit(2000000379.568:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  386.512029][T10022] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  386.545005][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  386.547026][   T28] audit: type=1326 audit(2000000379.568:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6009cac819 code=0x50000
[  387.228628][T10025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10025 comm=syz.4.1714
[  387.249022][  T898] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  387.385215][T10031] loop4: detected capacity change from 0 to 2048
[  387.504338][T10031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.583442][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  388.139162][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  388.194977][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.287642][T10045] loop4: detected capacity change from 0 to 128
[  388.320113][T10045] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  388.423950][T10049] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  388.432399][   T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  388.623437][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  389.516224][T10061] syzkaller0: tun_chr_ioctl cmd 1074025677
[  389.562950][T10061] syzkaller0: linktype set to 825
[  389.663487][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  389.850731][   T49] Bluetooth: hci1: Frame reassembly failed (-84)
[  390.028086][T10080] loop5: detected capacity change from 0 to 128
[  390.081679][T10080] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  390.143476][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  390.149663][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  390.186706][   T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  390.288010][T10086] loop5: detected capacity change from 0 to 128
[  390.296804][T10086] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  390.395171][   T49] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  390.481415][T10089] loop5: detected capacity change from 0 to 512
[  390.500391][T10089] FAT-fs (loop5): Directory bread(block 199916) failed
[  390.519508][T10089] FAT-fs (loop5): Directory bread(block 199917) failed
[  390.529901][T10089] FAT-fs (loop5): Directory bread(block 199918) failed
[  390.539533][T10089] FAT-fs (loop5): Directory bread(block 199919) failed
[  390.559526][T10089] FAT-fs (loop5): Directory bread(block 199920) failed
[  390.570062][T10089] FAT-fs (loop5): Directory bread(block 199921) failed
[  390.577199][T10089] FAT-fs (loop5): Directory bread(block 199922) failed
[  390.584440][T10089] FAT-fs (loop5): Directory bread(block 199923) failed
[  390.610639][T10089] xt_hashlimit: size too large, truncated to 1048576
[  390.705306][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  390.919793][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  391.089787][T10115] loop2: detected capacity change from 0 to 128
[  391.102635][T10115] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  391.143230][   T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  391.378024][T10123] loop2: detected capacity change from 0 to 512
[  391.392587][   T28] kauditd_printk_skb: 6870 callbacks suppressed
[  391.392668][   T28] audit: type=1400 audit(2000000384.988:8480): avc:  denied  { connect } for  pid=10122 comm="syz.2.1745" lport=258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  391.524709][   T28] audit: type=1400 audit(2000000385.128:8481): avc:  denied  { getopt } for  pid=10122 comm="syz.2.1745" laddr=172.20.20.10 lport=258 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  391.697527][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'.
[  391.709656][T10135] loop2: detected capacity change from 0 to 512
[  391.722128][   T28] audit: type=1400 audit(2000000385.298:8482): avc:  denied  { ioctl } for  pid=10134 comm="syz.2.1749" path="socket:[31750]" dev="sockfs" ino=31750 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  391.743705][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  391.751662][   T28] audit: type=1400 audit(2000000385.318:8483): avc:  denied  { remount } for  pid=10134 comm="syz.2.1749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  391.905866][ T4963] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  391.912594][ T4963] Bluetooth: hci0: sending frame failed (-49)
[  391.918901][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  392.127501][   T28] audit: type=1400 audit(2000000385.728:8484): avc:  denied  { getopt } for  pid=10146 comm="syz.7.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  392.356212][   T28] audit: type=1400 audit(2000000385.818:8485): avc:  denied  { setcurrent } for  pid=10146 comm="syz.7.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  392.494237][T10152] netlink: 'syz.7.1754': attribute type 13 has an invalid length.
[  392.507163][   T28] audit: type=1400 audit(2000000385.858:8486): avc:  denied  { ioctl } for  pid=10146 comm="syz.7.1753" path="socket:[31196]" dev="sockfs" ino=31196 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  392.555859][T10152] netlink: 'syz.7.1754': attribute type 17 has an invalid length.
[  392.783434][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  392.791871][T10152] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.835537][T10152] 8021q: adding VLAN 0 to HW filter on device team0
[  392.932932][T10152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  392.971076][T10158] loop5: detected capacity change from 0 to 128
[  393.048904][T10158] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  393.405638][ T5532] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  393.823448][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  393.880661][T10164] syzkaller0: entered promiscuous mode
[  393.932844][T10164] syzkaller0: entered allmulticast mode
[  393.987415][   T28] audit: type=1400 audit(2000000387.588:8487): avc:  denied  { relabelfrom } for  pid=10163 comm="syz.5.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  394.177606][   T28] audit: type=1400 audit(2000000387.588:8488): avc:  denied  { relabelto } for  pid=10163 comm="syz.5.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  394.613353][ T7199] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  394.617955][T10179] loop2: detected capacity change from 0 to 128
[  394.636959][T10179] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  394.667290][ T7199] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  394.755902][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'.
[  394.798794][ T3693] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  394.863499][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  394.945433][T10202] netlink: 'syz.2.1768': attribute type 13 has an invalid length.
[  394.960694][T10202] netlink: 'syz.2.1768': attribute type 17 has an invalid length.
[  395.123562][   T49] Bluetooth: hci0: Frame reassembly failed (-84)
[  395.178748][T10202] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.202419][T10202] 8021q: adding VLAN 0 to HW filter on device team0
[  395.213890][T10202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.285485][T10223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10223 comm=syz.4.1774
[  395.308573][   T28] audit: type=1400 audit(2000000388.908:8489): avc:  denied  { watch watch_reads } for  pid=10222 comm="syz.5.1775" path="/220" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  395.361496][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1776'.
[  395.395070][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1776'.
[  395.422191][T10226] dummy0: entered promiscuous mode
[  395.430568][T10226] team0: entered promiscuous mode
[  395.437724][T10226] team_slave_0: entered promiscuous mode
[  395.444786][T10226] team_slave_1: entered promiscuous mode
[  395.462029][T10226] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  395.903455][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  396.337149][T10244] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  396.427169][T10244] bond2 (unregistering): Released all slaves
[  396.698804][T10260] loop2: detected capacity change from 0 to 128
[  396.750719][T10260] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  396.783086][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  396.783102][   T28] audit: type=1400 audit(2000000390.378:8497): avc:  denied  { accept } for  pid=10262 comm="syz.5.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  396.866038][   T28] audit: type=1400 audit(2000000390.418:8498): avc:  denied  { ioctl } for  pid=10262 comm="syz.5.1787" path="socket:[31567]" dev="sockfs" ino=31567 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  396.897229][T10251] xt_NFQUEUE: number of total queues is 0
[  396.943427][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  396.984484][T10271] loop5: detected capacity change from 0 to 512
[  396.995983][T10271] EXT4-fs: Ignoring removed i_version option
[  397.007217][T10271] EXT4-fs: Ignoring removed nomblk_io_submit option
[  397.037811][T10271] EXT4-fs (loop5): unsupported inode size: 0
[  397.072875][   T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  397.085171][T10271] EXT4-fs (loop5): blocksize: 1024
[  397.183857][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  397.190113][ T3709] Bluetooth: hci0: command 0x1003 tx timeout
[  397.220360][T10280] loop5: detected capacity change from 0 to 512
[  397.243001][T10285] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.1795'.
[  397.257547][T10280] EXT4-fs (loop5): 1 truncate cleaned up
[  397.309253][T10280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.399933][T10293] loop4: detected capacity change from 0 to 512
[  397.480373][T10295] loop7: detected capacity change from 0 to 512
[  397.966438][T10210] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  397.977033][T10295] FAT-fs (loop7): Directory bread(block 199916) failed
[  397.983558][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  397.987652][T10295] FAT-fs (loop7): Directory bread(block 199917) failed
[  397.999696][T10295] FAT-fs (loop7): Directory bread(block 199918) failed
[  398.010011][T10295] FAT-fs (loop7): Directory bread(block 199919) failed
[  398.018005][T10293] FAT-fs (loop4): Directory bread(block 199916) failed
[  398.018044][T10293] FAT-fs (loop4): Directory bread(block 199917) failed
[  398.018071][T10293] FAT-fs (loop4): Directory bread(block 199918) failed
[  398.018093][T10293] FAT-fs (loop4): Directory bread(block 199919) failed
[  398.018117][T10293] FAT-fs (loop4): Directory bread(block 199920) failed
[  398.018139][T10293] FAT-fs (loop4): Directory bread(block 199921) failed
[  398.018163][T10293] FAT-fs (loop4): Directory bread(block 199922) failed
[  398.018252][T10293] FAT-fs (loop4): Directory bread(block 199923) failed
[  398.085907][T10295] FAT-fs (loop7): Directory bread(block 199920) failed
[  398.092921][T10295] FAT-fs (loop7): Directory bread(block 199921) failed
[  398.102956][T10295] FAT-fs (loop7): Directory bread(block 199922) failed
[  398.111195][T10295] FAT-fs (loop7): Directory bread(block 199923) failed
[  398.121552][T10210] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  398.136052][T10294] FAT-fs (loop7): Directory bread(block 199916) failed
[  398.143122][T10294] FAT-fs (loop7): Directory bread(block 199917) failed
[  398.199503][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1800'.
[  398.225069][T10293] xt_hashlimit: size too large, truncated to 1048576
[  398.396030][T10305] loop2: detected capacity change from 0 to 128
[  398.415837][T10305] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  398.497186][   T28] audit: type=1400 audit(2000000392.098:8499): avc:  denied  { create } for  pid=10308 comm="syz.1.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  398.529736][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1804'.
[  398.566584][ T8896] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  398.629966][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.644400][T10318] tmpfs: Unknown parameter ''
[  398.655516][   T28] audit: type=1400 audit(2000000392.258:8500): avc:  denied  { remount } for  pid=10311 comm="syz.7.1804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  399.006917][T10327] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.1808'.
[  399.023445][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  399.054878][T10329] loop4: detected capacity change from 0 to 128
[  399.066196][T10329] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  399.379766][ T7199] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  399.406872][ T8896] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  399.417634][ T7199] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  399.459486][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'.
[  399.491543][T10336] fido_id[10336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  399.514912][ T2069] Bluetooth: hci0: Frame reassembly failed (-84)
[  399.595692][T10344] loop4: detected capacity change from 0 to 512
[  399.670488][T10344] FAT-fs (loop4): Directory bread(block 199916) failed
[  399.679936][T10344] FAT-fs (loop4): Directory bread(block 199917) failed
[  399.689273][T10344] FAT-fs (loop4): Directory bread(block 199918) failed
[  399.697851][T10344] FAT-fs (loop4): Directory bread(block 199919) failed
[  399.707255][T10344] FAT-fs (loop4): Directory bread(block 199920) failed
[  399.716219][T10344] FAT-fs (loop4): Directory bread(block 199921) failed
[  399.723328][T10344] FAT-fs (loop4): Directory bread(block 199922) failed
[  399.730516][T10344] FAT-fs (loop4): Directory bread(block 199923) failed
[  399.780745][T10344] FAT-fs (loop4): Directory bread(block 199916) failed
[  399.789567][T10344] FAT-fs (loop4): Directory bread(block 199917) failed
[  400.063464][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  400.210125][T10351] syzkaller0: tun_chr_ioctl cmd 1074025677
[  400.216259][T10351] syzkaller0: linktype set to 825
[  400.280372][   T28] audit: type=1400 audit(2000000393.878:8501): avc:  denied  { sqpoll } for  pid=10357 comm="syz.1.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  400.464669][T10373] xt_hashlimit: size too large, truncated to 1048576
[  400.555710][T10376] loop2: detected capacity change from 0 to 128
[  400.601161][T10376] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  400.740210][ T5424] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  400.876677][T10385] loop2: detected capacity change from 0 to 256
[  401.103444][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  401.241844][   T28] audit: type=1400 audit(2000000394.798:8502): avc:  denied  { write } for  pid=10384 comm="syz.2.1825" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  401.583482][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  402.143437][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  403.183480][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  403.205310][T10412] loop5: detected capacity change from 0 to 512
[  403.216471][T10412] FAT-fs (loop5): Directory bread(block 199916) failed
[  403.223620][T10412] FAT-fs (loop5): Directory bread(block 199917) failed
[  403.230802][T10412] FAT-fs (loop5): Directory bread(block 199918) failed
[  403.237741][T10412] FAT-fs (loop5): Directory bread(block 199919) failed
[  403.245413][T10412] FAT-fs (loop5): Directory bread(block 199920) failed
[  403.252332][T10412] FAT-fs (loop5): Directory bread(block 199921) failed
[  403.259298][T10412] FAT-fs (loop5): Directory bread(block 199922) failed
[  403.266297][T10412] FAT-fs (loop5): Directory bread(block 199923) failed
[  403.277547][T10412] FAT-fs (loop5): Directory bread(block 199916) failed
[  403.284642][T10412] FAT-fs (loop5): Directory bread(block 199917) failed
[  403.313937][T10415] netlink: 9216 bytes leftover after parsing attributes in process `syz.7.1833'.
[  403.486881][T10417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1834'.
[  403.517078][T10417] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1834'.
[  403.537576][T10419] loop2: detected capacity change from 0 to 128
[  403.541739][T10417] gretap0: entered promiscuous mode
[  403.580678][T10417] gretap0: left promiscuous mode
[  403.589076][T10419] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  403.593664][   T28] audit: type=1400 audit(2000000397.188:8503): avc:  denied  { create } for  pid=10420 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  403.640614][T10421] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  403.765777][T10433] netlink: 'syz.1.1839': attribute type 13 has an invalid length.
[  403.814613][T10433] netlink: 'syz.1.1839': attribute type 17 has an invalid length.
[  403.997078][T10438] loop4: detected capacity change from 0 to 128
[  404.017704][T10440] loop7: detected capacity change from 0 to 128
[  404.039724][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1842'.
[  404.058290][T10438] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  404.079590][T10440] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  404.096439][ T8783] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  404.200072][T10450] loop5: detected capacity change from 0 to 128
[  404.220235][ T8783] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  404.220262][T10433] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.229952][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  404.243684][T10433] 8021q: adding VLAN 0 to HW filter on device team0
[  404.254021][T10450] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  404.273239][ T5424] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  404.293262][T10433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  404.509811][T10461] loop7: detected capacity change from 0 to 512
[  404.522255][T10461] FAT-fs (loop7): Directory bread(block 199916) failed
[  404.529356][T10461] FAT-fs (loop7): Directory bread(block 199917) failed
[  404.536407][T10461] FAT-fs (loop7): Directory bread(block 199918) failed
[  404.544430][T10461] FAT-fs (loop7): Directory bread(block 199919) failed
[  404.551416][T10461] FAT-fs (loop7): Directory bread(block 199920) failed
[  404.558390][T10461] FAT-fs (loop7): Directory bread(block 199921) failed
[  404.565467][T10461] FAT-fs (loop7): Directory bread(block 199922) failed
[  404.572508][T10461] FAT-fs (loop7): Directory bread(block 199923) failed
[  404.584833][T10461] FAT-fs (loop7): Directory bread(block 199916) failed
[  404.592038][T10461] FAT-fs (loop7): Directory bread(block 199917) failed
[  405.263464][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  406.291691][ T9492] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  406.303428][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  406.320155][ T9492] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  406.892456][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'.
[  406.896713][ T3693] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  406.985236][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1851'.
[  406.994599][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1851'.
[  407.017168][T10479] gretap0: entered promiscuous mode
[  407.225951][T10479] gretap0: left promiscuous mode
[  407.258020][ T3693] Bluetooth: hci0: Frame reassembly failed (-84)
[  407.345379][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  407.401947][T10489] loop5: detected capacity change from 0 to 256
[  407.481901][T10489] FAT-fs (loop5): codepage cp857 not found
[  407.771299][   T28] audit: type=1400 audit(2000000401.368:8504): avc:  denied  { read } for  pid=10502 comm="syz.1.1862" path="socket:[32210]" dev="sockfs" ino=32210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  407.852049][   T28] audit: type=1400 audit(2000000401.368:8505): avc:  denied  { setopt } for  pid=10502 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  407.947186][T10506] rdma_rxe: rxe_newlink: failed to add xfrm0
[  407.947331][T10509] loop5: detected capacity change from 0 to 512
[  408.029684][T10509] FAT-fs (loop5): Directory bread(block 199916) failed
[  408.057221][T10509] FAT-fs (loop5): Directory bread(block 199917) failed
[  408.077811][T10509] FAT-fs (loop5): Directory bread(block 199918) failed
[  408.098482][T10509] FAT-fs (loop5): Directory bread(block 199919) failed
[  408.268868][T10509] FAT-fs (loop5): Directory bread(block 199920) failed
[  408.281807][T10509] FAT-fs (loop5): Directory bread(block 199921) failed
[  408.319660][T10516] loop7: detected capacity change from 0 to 128
[  408.373614][T10516] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  408.383424][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  408.515922][T10509] FAT-fs (loop5): Directory bread(block 199922) failed
[  408.598481][T10509] FAT-fs (loop5): Directory bread(block 199923) failed
[  408.717759][T10521] loop2: detected capacity change from 0 to 256
[  408.758055][ T8783] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  408.793232][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1872'.
[  408.820847][T10521] FAT-fs (loop2): codepage cp857 not found
[  408.868161][T10509] FAT-fs (loop5): Directory bread(block 199916) failed
[  408.905279][   T28] audit: type=1400 audit(2000000402.498:8506): avc:  denied  { write } for  pid=10525 comm="syz.7.1871" name="packet" dev="proc" ino=4026532685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  408.931500][ T3400] IPVS: starting estimator thread 0...
[  408.942201][T10509] FAT-fs (loop5): Directory bread(block 199917) failed
[  409.068832][T10530] IPVS: using max 2208 ests per chain, 110400 per kthread
[  409.264834][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  409.271003][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  409.423439][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  410.463462][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  410.557030][T10548] loop5: detected capacity change from 0 to 128
[  410.612513][T10548] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  411.503471][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  411.527279][ T8783] Bluetooth: hci0: Frame reassembly failed (-84)
[  411.535585][T10557] netlink: 'syz.1.1883': attribute type 13 has an invalid length.
[  411.544415][T10557] netlink: 'syz.1.1883': attribute type 17 has an invalid length.
[  411.595393][   T28] audit: type=1400 audit(2000000405.198:8507): avc:  denied  { setopt } for  pid=10559 comm="syz.2.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  411.723697][T10557] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.743868][T10557] 8021q: adding VLAN 0 to HW filter on device team0
[  411.783065][T10557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  412.016256][  T898] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  412.212538][T10577] netlink: 'syz.2.1887': attribute type 13 has an invalid length.
[  412.258330][T10577] netlink: 'syz.2.1887': attribute type 17 has an invalid length.
[  412.543469][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  413.239507][T10587] loop5: detected capacity change from 0 to 512
[  413.319856][T10587] FAT-fs (loop5): Directory bread(block 199916) failed
[  413.327777][T10587] FAT-fs (loop5): Directory bread(block 199917) failed
[  413.335008][T10587] FAT-fs (loop5): Directory bread(block 199918) failed
[  413.342232][T10587] FAT-fs (loop5): Directory bread(block 199919) failed
[  413.349328][T10587] FAT-fs (loop5): Directory bread(block 199920) failed
[  413.357225][T10587] FAT-fs (loop5): Directory bread(block 199921) failed
[  413.364384][T10587] FAT-fs (loop5): Directory bread(block 199922) failed
[  413.371343][T10587] FAT-fs (loop5): Directory bread(block 199923) failed
[  413.398363][T10577] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.414571][T10587] FAT-fs (loop5): Directory bread(block 199916) failed
[  413.421702][T10587] FAT-fs (loop5): Directory bread(block 199917) failed
[  413.583431][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  413.694979][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  413.750318][T10577] 8021q: adding VLAN 0 to HW filter on device team0
[  413.765267][T10577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  413.817052][T10592] loop7: detected capacity change from 0 to 128
[  413.855245][T10592] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  413.912955][   T28] audit: type=1326 audit(2000000407.508:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  413.964315][   T28] audit: type=1326 audit(2000000407.508:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.002059][T10595] loop4: detected capacity change from 0 to 1024
[  414.017667][T10595] EXT4-fs: Ignoring removed orlov option
[  414.026824][   T28] audit: type=1326 audit(2000000407.508:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.058078][   T28] audit: type=1326 audit(2000000407.508:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.082371][   T28] audit: type=1326 audit(2000000407.508:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.121499][   T28] audit: type=1326 audit(2000000407.508:8513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.146267][   T28] audit: type=1326 audit(2000000407.508:8514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.170618][   T28] audit: type=1326 audit(2000000407.508:8515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.195253][   T28] audit: type=1326 audit(2000000407.508:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.219370][   T28] audit: type=1326 audit(2000000407.538:8517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.243882][   T28] audit: type=1326 audit(2000000407.538:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8b1c819 code=0x7ffc0000
[  414.269104][T10595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.623456][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  415.420519][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.486359][ T8896] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  415.555091][T10619] loop5: detected capacity change from 0 to 512
[  415.577182][T10615] loop4: detected capacity change from 0 to 1024
[  415.663448][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  415.697593][T10619] EXT4-fs (loop5): 1 truncate cleaned up
[  415.901151][T10619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.930559][T10615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.999767][T10632] loop2: detected capacity change from 0 to 128
[  416.703438][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  417.743477][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  418.392850][T10660] loop2: detected capacity change from 0 to 128
[  418.414690][T10660] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  418.469731][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.492194][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.527209][ T2069] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  418.657311][T10676] loop5: detected capacity change from 0 to 512
[  418.664089][T10676] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[  418.673726][T10676] 9p: Bad value for 'rfdno'
[  418.713628][T10673] loop2: detected capacity change from 0 to 512
[  418.783421][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  418.965806][T10673] FAT-fs (loop2): Directory bread(block 199916) failed
[  419.130120][T10682] 9p: Bad value for 'rfdno'
[  419.143548][T10673] FAT-fs (loop2): Directory bread(block 199917) failed
[  419.270626][T10673] FAT-fs (loop2): Directory bread(block 199918) failed
[  419.279719][T10673] FAT-fs (loop2): Directory bread(block 199919) failed
[  419.296306][T10673] FAT-fs (loop2): Directory bread(block 199920) failed
[  419.314823][T10673] FAT-fs (loop2): Directory bread(block 199921) failed
[  419.331625][T10686] loop7: detected capacity change from 0 to 512
[  419.333335][T10673] FAT-fs (loop2): Directory bread(block 199922) failed
[  419.352619][T10686] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  419.373246][T10673] FAT-fs (loop2): Directory bread(block 199923) failed
[  419.389722][T10686] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  419.401822][T10686] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1919: bad orphan inode 4
[  419.417700][T10686] loop7: lost filesystem error report for type 5 error -117
[  419.423402][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  419.423438][T10686] EXT4-fs (loop7): 1 orphan inode deleted
[  419.430852][    C0] EXT4-fs (loop7): initial error at time 2000000413: ext4_orphan_get:1423
[  419.430879][    C0] EXT4-fs (loop7): last error at time 2000000413: ext4_orphan_get:1423
[  419.501964][T10686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.514864][T10673] xt_hashlimit: size too large, truncated to 1048576
[  419.823427][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  419.936998][T10703] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.1919: lblock 0 mapped to illegal pblock 4 (length 1)
[  419.957772][   T28] kauditd_printk_skb: 241 callbacks suppressed
[  419.957787][   T28] audit: type=1326 audit(2000000413.558:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.7.1919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50649cc819 code=0x0
[  420.412694][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1924'.
[  420.471554][T10706] loop2: detected capacity change from 0 to 512
[  420.481465][T10708] loop4: detected capacity change from 0 to 512
[  420.498481][T10706] EXT4-fs: test_dummy_encryption option not supported
[  420.528120][ T7268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.541818][T10708] EXT4-fs: user quota file already specified
[  420.625053][   T88] Bluetooth: hci0: Frame reassembly failed (-84)
[  420.762219][T10721] loop5: detected capacity change from 0 to 128
[  420.848169][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'.
[  420.863430][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  421.668281][   T28] audit: type=1326 audit(2000000415.268:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10705 comm="syz.2.1925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8978d8c819 code=0x0
[  421.700805][T10735] loop5: detected capacity change from 0 to 128
[  421.876916][T10740] bio_check_eod: 5 callbacks suppressed
[  421.876936][T10740] syz.5.1934: attempt to access beyond end of device
[  421.876936][T10740] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128
[  421.903462][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  421.931756][T10740] syz.5.1934: attempt to access beyond end of device
[  421.931756][T10740] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[  421.973257][T10740] syz.5.1934: attempt to access beyond end of device
[  421.973257][T10740] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[  422.055827][   T28] audit: type=1400 audit(2000000415.658:8762): avc:  denied  { create } for  pid=10734 comm="syz.5.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  422.201897][   T28] audit: type=1400 audit(2000000415.678:8763): avc:  denied  { ioctl } for  pid=10734 comm="syz.5.1934" path="socket:[33696]" dev="sockfs" ino=33696 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  422.243924][T10740] syz.5.1934: attempt to access beyond end of device
[  422.243924][T10740] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[  422.935910][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  422.943503][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  422.948872][T10740] syz.5.1934: attempt to access beyond end of device
[  422.948872][T10740] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[  423.983422][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  424.735087][T10207] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  424.743070][   T12] kworker/u8:0: attempt to access beyond end of device
[  424.743070][   T12] loop5: rw=1, sector=233, nr_sectors = 8 limit=128
[  424.784800][   T12] kworker/u8:0: attempt to access beyond end of device
[  424.784800][   T12] loop5: rw=1, sector=249, nr_sectors = 8 limit=128
[  424.806244][T10207] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  424.815420][   T12] kworker/u8:0: attempt to access beyond end of device
[  424.815420][   T12] loop5: rw=1, sector=265, nr_sectors = 8 limit=128
[  424.832268][T10755] loop4: detected capacity change from 0 to 1024
[  424.863593][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1939'.
[  424.914699][   T12] kworker/u8:0: attempt to access beyond end of device
[  424.914699][   T12] loop5: rw=1, sector=281, nr_sectors = 8 limit=128
[  424.914750][   T12] kworker/u8:0: attempt to access beyond end of device
[  424.914750][   T12] loop5: rw=1, sector=297, nr_sectors = 8 limit=128
[  425.006919][T10760] 9p: Bad value for 'rfdno'
[  425.023417][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  425.525481][   T28] audit: type=1400 audit(2000000418.928:8764): avc:  denied  { kexec_image_load } for  pid=10764 comm="syz.2.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  425.545954][T10755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.637698][T10782] loop5: detected capacity change from 0 to 512
[  425.645306][T10782] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[  425.655808][T10782] 9p: Bad value for 'rfdno'
[  426.018304][T10788] loop7: detected capacity change from 0 to 512
[  426.063438][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  426.149229][T10788] FAT-fs (loop7): Directory bread(block 199916) failed
[  426.257730][T10788] FAT-fs (loop7): Directory bread(block 199917) failed
[  426.329727][T10788] FAT-fs (loop7): Directory bread(block 199918) failed
[  426.354940][T10788] FAT-fs (loop7): Directory bread(block 199919) failed
[  426.367679][T10788] FAT-fs (loop7): Directory bread(block 199920) failed
[  426.384662][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.392550][T10788] FAT-fs (loop7): Directory bread(block 199921) failed
[  426.404392][T10788] FAT-fs (loop7): Directory bread(block 199922) failed
[  426.457092][T10788] FAT-fs (loop7): Directory bread(block 199923) failed
[  426.518579][T10788] xt_hashlimit: size too large, truncated to 1048576
[  426.619700][T10802] loop5: detected capacity change from 0 to 1024
[  426.777987][T10802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  426.918137][T10806] loop4: detected capacity change from 0 to 2048
[  427.103530][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  427.917930][T10806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.003156][T10818] SELinux:  Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped).
[  428.067522][   T28] audit: type=1400 audit(2000000421.668:8765): avc:  denied  { relabelto } for  pid=10817 comm="syz.1.1958" name="cgroup" dev="tmpfs" ino=2398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:v4l_device_t:s0"
[  428.070054][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.098223][   T28] audit: type=1400 audit(2000000421.698:8766): avc:  denied  { associate } for  pid=10817 comm="syz.1.1958" name="cgroup" dev="tmpfs" ino=2398 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:v4l_device_t:s0"
[  428.143431][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  428.183438][   T28] audit: type=1400 audit(2000000421.738:8767): avc:  denied  { name_bind } for  pid=10817 comm="syz.1.1958" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  428.204999][T10822] loop7: detected capacity change from 0 to 512
[  428.216083][   T28] audit: type=1400 audit(2000000421.758:8768): avc:  denied  { cmd } for  pid=10817 comm="syz.1.1958" path="socket:[32680]" dev="sockfs" ino=32680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  428.246179][T10822] FAT-fs (loop7): Directory bread(block 199916) failed
[  428.253143][T10822] FAT-fs (loop7): Directory bread(block 199917) failed
[  428.275138][T10822] FAT-fs (loop7): Directory bread(block 199918) failed
[  428.363438][T10822] FAT-fs (loop7): Directory bread(block 199919) failed
[  428.373247][   T28] audit: type=1400 audit(2000000421.888:8769): avc:  denied  { unlink } for  pid=3311 comm="syz-executor" name="cgroup" dev="tmpfs" ino=2398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:v4l_device_t:s0"
[  428.377475][T10822] FAT-fs (loop7): Directory bread(block 199920) failed
[  428.427402][T10822] FAT-fs (loop7): Directory bread(block 199921) failed
[  428.450871][T10822] FAT-fs (loop7): Directory bread(block 199922) failed
[  428.473677][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.484270][T10822] FAT-fs (loop7): Directory bread(block 199923) failed
[  428.493430][T10207] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  428.503057][T10207] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  428.564878][T10822] xt_hashlimit: size too large, truncated to 1048576
[  428.697400][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'.
[  429.183419][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  429.358009][T10850] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1967'.
[  429.361045][T10839] loop2: detected capacity change from 0 to 8192
[  429.386307][   T28] audit: type=1400 audit(2000000422.988:8770): avc:  denied  { nlmsg_write } for  pid=10849 comm="syz.1.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  429.490647][T10839] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  429.540013][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  429.549919][T10837] FAT-fs (loop2): Filesystem has been set read-only
[  429.556645][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  429.565708][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  429.575705][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  429.584971][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  429.594172][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  429.607071][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  429.625546][T10860] FAULT_INJECTION: forcing a failure.
[  429.625546][T10860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.110038][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  430.135386][T10860] CPU: 1 UID: 0 PID: 10860 Comm: syz.5.1971 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  430.135546][T10860] Tainted: [W]=WARN
[  430.135555][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  430.135573][T10860] Call Trace:
[  430.135581][T10860]  <TASK>
[  430.135592][T10860]  __dump_stack+0x1d/0x30
[  430.135627][T10860]  dump_stack_lvl+0x95/0xd0
[  430.135658][T10860]  dump_stack+0x15/0x1b
[  430.135708][T10860]  should_fail_ex+0x263/0x280
[  430.135758][T10860]  should_fail+0xb/0x20
[  430.135790][T10860]  should_fail_usercopy+0x1a/0x20
[  430.135838][T10860]  _copy_from_iter+0xcf/0xea0
[  430.135886][T10860]  ? __alloc_skb+0x4f6/0x690
[  430.135919][T10860]  ? __alloc_skb+0x200/0x690
[  430.135953][T10860]  netlink_sendmsg+0x4ae/0x6f0
[  430.136002][T10860]  ? __pfx_netlink_sendmsg+0x10/0x10
[  430.136056][T10860]  ____sys_sendmsg+0x563/0x5b0
[  430.136098][T10860]  ___sys_sendmsg+0x195/0x1e0
[  430.136191][T10860]  __x64_sys_sendmsg+0xd4/0x160
[  430.136232][T10860]  x64_sys_call+0x194c/0x3020
[  430.136267][T10860]  do_syscall_64+0x12c/0x3b0
[  430.136305][T10860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.136355][T10860] RIP: 0033:0x7f6009cac819
[  430.136372][T10860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.136397][T10860] RSP: 002b:00007f60086ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  430.136511][T10860] RAX: ffffffffffffffda RBX: 00007f6009f25fa0 RCX: 00007f6009cac819
[  430.136530][T10860] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003
[  430.136546][T10860] RBP: 00007f60086ff090 R08: 0000000000000000 R09: 0000000000000000
[  430.136576][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.136590][T10860] R13: 00007f6009f26038 R14: 00007f6009f25fa0 R15: 00007fffb9905bc8
[  430.136612][T10860]  </TASK>
[  430.136896][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  430.142002][   T28] audit: type=1400 audit(2000000423.728:8771): avc:  denied  { read } for  pid=10864 comm="syz.4.1972" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  430.223631][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  430.406379][T10837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  430.428178][   T28] audit: type=1400 audit(2000000423.728:8772): avc:  denied  { open } for  pid=10864 comm="syz.4.1972" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  430.483497][   T28] audit: type=1400 audit(2000000423.728:8773): avc:  denied  { ioctl } for  pid=10864 comm="syz.4.1972" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  430.567378][   T28] audit: type=1400 audit(2000000424.058:8774): avc:  denied  { write } for  pid=10869 comm="syz.5.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  430.592719][T10867] xfrm0 speed is unknown, defaulting to 1000
[  430.634273][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1978'.
[  430.645883][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1978'.
[  430.712408][T10882] loop5: detected capacity change from 0 to 512
[  430.721328][T10882] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[  430.738987][T10882] 9p: Bad value for 'rfdno'
[  430.807164][T10879] team0: entered promiscuous mode
[  430.860263][T10879] team_slave_0: entered promiscuous mode
[  431.054130][T10879] team_slave_1: entered promiscuous mode
[  431.249208][T10879] bond0: entered promiscuous mode
[  431.263446][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  431.278374][T10879] bond_slave_0: entered promiscuous mode
[  431.293439][T10879] bond_slave_1: entered promiscuous mode
[  431.300508][T10879] debugfs: 'hsr1' already exists in 'hsr'
[  431.306619][T10879] Cannot create hsr debugfs directory
[  431.312339][T10879] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[  431.324403][T10879] 8021q: adding VLAN 0 to HW filter on device hsr1
[  431.340057][T10885] loop4: detected capacity change from 0 to 512
[  431.410848][T10885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.690152][T10900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12800 sclass=netlink_route_socket pid=10900 comm=syz.7.1979
[  431.726014][   T28] audit: type=1400 audit(2000000425.278:8775): avc:  denied  { create } for  pid=10889 comm="syz.7.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  431.961316][T10900] xfrm0 speed is unknown, defaulting to 1000
[  432.160098][   T28] audit: type=1400 audit(2000000425.358:8776): avc:  denied  { getopt } for  pid=10889 comm="syz.7.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  432.268617][T10906] FAULT_INJECTION: forcing a failure.
[  432.268617][T10906] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  432.290000][   T28] audit: type=1400 audit(2000000425.868:8777): avc:  denied  { mount } for  pid=10905 comm="syz.2.1981" name="/" dev="ramfs" ino=34154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  432.313898][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  432.325634][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.2.1981 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  432.325717][T10906] Tainted: [W]=WARN
[  432.325724][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  432.325738][T10906] Call Trace:
[  432.325745][T10906]  <TASK>
[  432.325752][T10906]  __dump_stack+0x1d/0x30
[  432.325787][T10906]  dump_stack_lvl+0x95/0xd0
[  432.325820][T10906]  dump_stack+0x15/0x1b
[  432.325881][T10906]  should_fail_ex+0x263/0x280
[  432.325908][T10906]  should_fail+0xb/0x20
[  432.325948][T10906]  should_fail_usercopy+0x1a/0x20
[  432.325997][T10906]  _copy_from_user+0x1c/0xb0
[  432.326033][T10906]  do_sys_poll+0x140/0xc00
[  432.326081][T10906]  ? avc_has_perm+0x101/0x190
[  432.326118][T10906]  ? selinux_file_open+0x2e6/0x330
[  432.326253][T10906]  ? timespec64_add_safe+0x106/0x150
[  432.326288][T10906]  __x64_sys_poll+0x12c/0x230
[  432.326343][T10906]  x64_sys_call+0x2891/0x3020
[  432.326436][T10906]  do_syscall_64+0x12c/0x3b0
[  432.326469][T10906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.326510][T10906] RIP: 0033:0x7f8978d8c819
[  432.326531][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.326604][T10906] RSP: 002b:00007f89777df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  432.326630][T10906] RAX: ffffffffffffffda RBX: 00007f8979005fa0 RCX: 00007f8978d8c819
[  432.326654][T10906] RDX: 0000000000006bb9 RSI: 0000000000000005 RDI: 0000200000000200
[  432.326671][T10906] RBP: 00007f89777df090 R08: 0000000000000000 R09: 0000000000000000
[  432.326719][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  432.326732][T10906] R13: 00007f8979006038 R14: 00007f8979005fa0 R15: 00007fff70baf318
[  432.326751][T10906]  </TASK>
[  432.534132][   T28] audit: type=1400 audit(2000000425.868:8778): avc:  denied  { write } for  pid=10905 comm="syz.2.1981" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  432.628204][   T28] audit: type=1400 audit(2000000426.218:8779): avc:  denied  { getopt } for  pid=10908 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  432.718256][   T28] audit: type=1400 audit(2000000426.318:8780): avc:  denied  { bind } for  pid=10916 comm="syz.2.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  432.784238][   T23] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  432.799036][   T23] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  432.932177][T10927] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1988'.
[  433.002492][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1987'.
[  433.053755][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.235634][T10940] loop5: detected capacity change from 0 to 256
[  433.343460][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  433.372479][T10940] FAT-fs (loop5): codepage cp857 not found
[  433.825813][T10949] FAULT_INJECTION: forcing a failure.
[  433.825813][T10949] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  433.839788][T10949] CPU: 1 UID: 0 PID: 10949 Comm: syz.4.1995 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  433.839830][T10949] Tainted: [W]=WARN
[  433.839839][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  433.839886][T10949] Call Trace:
[  433.839894][T10949]  <TASK>
[  433.839905][T10949]  __dump_stack+0x1d/0x30
[  433.839997][T10949]  dump_stack_lvl+0x95/0xd0
[  433.840091][T10949]  dump_stack+0x15/0x1b
[  433.840123][T10949]  should_fail_ex+0x263/0x280
[  433.840156][T10949]  should_fail+0xb/0x20
[  433.840186][T10949]  should_fail_usercopy+0x1a/0x20
[  433.840347][T10949]  _copy_from_iter+0xcf/0xea0
[  433.840454][T10949]  ? rep_movs_alternative+0x4a/0x90
[  433.840517][T10949]  ? _copy_from_iter+0x13e/0xea0
[  433.840558][T10949]  copy_page_from_iter+0x178/0x2a0
[  433.840660][T10949]  skb_copy_datagram_from_iter+0x22d/0x480
[  433.840704][T10949]  tun_get_user+0xb65/0x2780
[  433.840785][T10949]  ? ref_tracker_alloc+0x1eb/0x2f0
[  433.840830][T10949]  ? selinux_file_permission+0x2ef/0x320
[  433.840924][T10949]  tun_chr_write_iter+0x15e/0x210
[  433.840998][T10949]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  433.841040][T10949]  vfs_write+0x5a6/0x9f0
[  433.841082][T10949]  ksys_write+0xdc/0x1a0
[  433.841117][T10949]  __x64_sys_write+0x40/0x50
[  433.841219][T10949]  x64_sys_call+0x27e1/0x3020
[  433.841254][T10949]  do_syscall_64+0x12c/0x3b0
[  433.841286][T10949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.841340][T10949] RIP: 0033:0x7fd7b8add04e
[  433.841362][T10949] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  433.841388][T10949] RSP: 002b:00007fd7b756efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  433.841415][T10949] RAX: ffffffffffffffda RBX: 00007fd7b756f6c0 RCX: 00007fd7b8add04e
[  433.841509][T10949] RDX: 000000000002dc00 RSI: 0000200000000b00 RDI: 00000000000000c8
[  433.841524][T10949] RBP: 00007fd7b756f090 R08: 0000000000000000 R09: 0000000000000000
[  433.841540][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  433.841556][T10949] R13: 00007fd7b8d96038 R14: 00007fd7b8d95fa0 R15: 00007ffc265df518
[  433.841582][T10949]  </TASK>
[  433.869542][T10947] vcan0: tx drop: invalid da for name 0x0000000000000001
[  433.887572][   T28] audit: type=1400 audit(2000000427.448:8781): avc:  denied  { write } for  pid=10945 comm="syz.2.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  434.028504][T10954] 9p: Bad value for 'wfdno'
[  434.383457][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  434.609521][T10984] loop5: detected capacity change from 0 to 1024
[  434.620249][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2004'.
[  434.686860][T10984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.768601][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.423432][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  435.747159][    C0] vcan0: j1939_tp_rxtimer: 0xffff888122876800: rx timeout, send abort
[  435.765191][   T28] audit: type=1400 audit(2000000429.368:8782): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  435.811866][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2008'.
[  435.813248][   T28] audit: type=1400 audit(2000000429.368:8783): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  435.842963][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2008'.
[  435.868158][T10996] gretap0: entered promiscuous mode
[  435.927540][T10996] gretap0: left promiscuous mode
[  435.933196][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2010'.
[  435.935268][   T28] audit: type=1400 audit(2000000429.368:8784): avc:  denied  { append } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  435.976460][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2010'.
[  435.988577][T11000] 9p: Bad value for 'rfdno'
[  436.002476][T10998] dummy0: entered promiscuous mode
[  436.026292][   T28] audit: type=1400 audit(2000000429.368:8785): avc:  denied  { open } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  436.049702][T10998] dummy0: left promiscuous mode
[  436.062741][   T28] audit: type=1400 audit(2000000429.368:8786): avc:  denied  { getattr } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  436.220568][T11009] loop5: detected capacity change from 0 to 512
[  436.228769][T11009] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[  436.240139][T11009] 9p: Bad value for 'rfdno'
[  436.256027][    C0] vcan0: j1939_tp_rxtimer: 0xffff888122876800: abort rx timeout. Force session deactivation
[  436.463587][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  436.805947][T11020] netlink: 'syz.1.2018': attribute type 13 has an invalid length.
[  436.893240][T11022] loop2: detected capacity change from 0 to 128
[  436.899955][T11020] netlink: 'syz.1.2018': attribute type 17 has an invalid length.
[  436.961506][T10207] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  436.972319][T10207] hid-generic 0000:0000:0000.0024: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  436.996278][T11022] bio_check_eod: 82 callbacks suppressed
[  436.996293][T11022] syz.2.2019: attempt to access beyond end of device
[  436.996293][T11022] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128
[  437.077724][T11022] syz.2.2019: attempt to access beyond end of device
[  437.077724][T11022] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128
[  437.114904][T11022] Buffer I/O error on dev loop2, logical block 79, lost async page write
[  437.128244][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2017'.
[  437.195429][T11034] loop5: detected capacity change from 0 to 256
[  437.230869][T11020] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.244346][T11020] 8021q: adding VLAN 0 to HW filter on device team0
[  437.383548][T11022] syz.2.2019: attempt to access beyond end of device
[  437.383548][T11022] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128
[  437.383584][T11022] Buffer I/O error on dev loop2, logical block 80, lost async page write
[  437.383924][T11022] syz.2.2019: attempt to access beyond end of device
[  437.383924][T11022] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128
[  437.384428][T11022] syz.2.2019: attempt to access beyond end of device
[  437.384428][T11022] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128
[  437.384459][T11022] Buffer I/O error on dev loop2, logical block 83, lost async page write
[  437.384501][T11022] syz.2.2019: attempt to access beyond end of device
[  437.384501][T11022] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128
[  437.384531][T11022] Buffer I/O error on dev loop2, logical block 84, lost async page write
[  437.384760][T11022] syz.2.2019: attempt to access beyond end of device
[  437.384760][T11022] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128
[  437.385226][T11022] syz.2.2019: attempt to access beyond end of device
[  437.385226][T11022] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128
[  437.385257][T11022] Buffer I/O error on dev loop2, logical block 95, lost async page write
[  437.385376][T11022] syz.2.2019: attempt to access beyond end of device
[  437.385376][T11022] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128
[  437.385442][T11022] Buffer I/O error on dev loop2, logical block 96, lost async page write
[  437.385727][T11022] syz.2.2019: attempt to access beyond end of device
[  437.385727][T11022] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128
[  437.386272][T11022] Buffer I/O error on dev loop2, logical block 99, lost async page write
[  437.386315][T11022] Buffer I/O error on dev loop2, logical block 100, lost async page write
[  437.387167][T11022] Buffer I/O error on dev loop2, logical block 111, lost async page write
[  437.387210][T11022] Buffer I/O error on dev loop2, logical block 112, lost async page write
[  437.503440][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  437.634870][T11034] FAT-fs (loop5): codepage cp857 not found
[  438.131671][T11039] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2021'.
[  438.460964][T11020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  438.543477][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  438.555405][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2023'.
[  438.600556][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2025'.
[  438.607085][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2023'.
[  438.620263][   T28] audit: type=1400 audit(2000000432.208:8787): avc:  denied  { checkpoint_restore } for  pid=11042 comm="syz.5.2024" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  438.673095][T11045] gretap0: entered promiscuous mode
[  438.682906][T11045] gretap0: left promiscuous mode
[  438.848282][   T23] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  438.858480][T11059] 9p: Bad value for 'rfdno'
[  438.869421][   T23] hid-generic 0000:0000:0000.0025: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  438.953327][T11067] loop2: detected capacity change from 0 to 512
[  438.960086][T11067] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[  438.969462][T11067] 9p: Bad value for 'rfdno'
[  439.200950][T11070] loop4: detected capacity change from 0 to 256
[  439.511283][T11070] FAT-fs (loop4): codepage cp857 not found
[  439.583457][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  439.700663][T11081] __nla_validate_parse: 3 callbacks suppressed
[  439.700731][T11081] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2039'.
[  439.739574][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2042'.
[  439.760081][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2042'.
[  439.792341][T11087] gretap0: entered promiscuous mode
[  439.817242][T11087] gretap0: left promiscuous mode
[  440.000273][T11097] 9p: Bad value for 'wfdno'
[  440.337545][T11110] loop4: detected capacity change from 0 to 256
[  440.455346][T11110] FAT-fs (loop4): codepage cp857 not found
[  440.618861][ T7047] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  440.626398][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  440.670060][ T7047] hid-generic 0000:0000:0000.0026: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  440.986373][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2051'.
[  441.201577][   T28] audit: type=1400 audit(2000000440.794:8788): avc:  denied  { read } for  pid=11137 comm="syz.4.2060" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  441.240882][   T28] audit: type=1400 audit(2000000440.794:8789): avc:  denied  { open } for  pid=11137 comm="syz.4.2060" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  441.276184][   T28] audit: type=1400 audit(2000000440.794:8790): avc:  denied  { ioctl } for  pid=11137 comm="syz.4.2060" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  441.306699][   T28] audit: type=1400 audit(2000000440.834:8791): avc:  denied  { ioctl } for  pid=11139 comm="syz.2.2061" path="socket:[34736]" dev="sockfs" ino=34736 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  441.352341][   T28] audit: type=1400 audit(2000000440.834:8792): avc:  denied  { read write } for  pid=11139 comm="syz.2.2061" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  441.397167][   T28] audit: type=1400 audit(2000000440.834:8793): avc:  denied  { open } for  pid=11139 comm="syz.2.2061" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  441.422993][   T28] audit: type=1400 audit(2000000440.904:8794): avc:  denied  { ioctl } for  pid=11139 comm="syz.2.2061" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  441.445592][T11148] loop4: detected capacity change from 0 to 2048
[  441.450739][T11152] loop7: detected capacity change from 0 to 256
[  441.481686][T11158] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  441.528921][T11152] FAT-fs (loop7): codepage cp857 not found
[  441.539256][T11148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.587826][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'.
[  441.602078][   T28] audit: type=1400 audit(2000000441.184:8795): avc:  denied  { nlmsg_read } for  pid=11147 comm="syz.4.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  441.612720][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'.
[  441.665872][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  442.060910][   T28] audit: type=1400 audit(2000000441.194:8796): avc:  denied  { create } for  pid=11156 comm="syz.1.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  442.081960][   T28] audit: type=1400 audit(2000000441.194:8797): avc:  denied  { bind } for  pid=11156 comm="syz.1.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  442.145070][ T3693] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  442.164438][ T3693] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  442.180171][ T3693] EXT4-fs (loop4): This should not happen!! Data will be lost
[  442.180171][ T3693] 
[  442.217124][ T3693] EXT4-fs (loop4): Total free blocks count 0
[  442.223211][ T3693] EXT4-fs (loop4): Free/Dirty block details
[  442.229694][ T3693] EXT4-fs (loop4): free_blocks=4096
[  442.243212][ T3693] EXT4-fs (loop4): dirty_blocks=672
[  442.256565][ T3693] EXT4-fs (loop4): Block reservation details
[  442.266868][ T3693] EXT4-fs (loop4): i_reserved_data_blocks=42
[  442.286022][ T2069] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 640 with error 28
[  442.316771][ T3319] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  442.367291][T11176] loop7: detected capacity change from 0 to 512
[  442.399123][T11176] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  442.413054][T11176] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  442.421564][T11179] loop2: detected capacity change from 0 to 128
[  442.432110][T11176] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2072: bad orphan inode 4
[  442.435621][T11179] FAT-fs (loop2): Directory bread(block 288) failed
[  442.489996][T11176] loop7: lost filesystem error report for type 5 error -117
[  442.490234][T11176] EXT4-fs (loop7): 1 orphan inode deleted
[  442.497688][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  442.497716][    C1] EXT4-fs (loop7): initial error at time 2000000442: ext4_orphan_get:1423
[  442.497744][    C1] EXT4-fs (loop7): last error at time 2000000442: ext4_orphan_get:1423
[  442.600177][T11176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.614638][T11179] FAT-fs (loop2): Directory bread(block 289) failed
[  442.639733][T11179] FAT-fs (loop2): Directory bread(block 290) failed
[  442.661726][T11179] FAT-fs (loop2): Directory bread(block 291) failed
[  442.679079][T11179] FAT-fs (loop2): Directory bread(block 292) failed
[  442.703404][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  442.704280][T11179] FAT-fs (loop2): Directory bread(block 293) failed
[  442.785399][T11179] FAT-fs (loop2): Directory bread(block 294) failed
[  442.792491][T11179] FAT-fs (loop2): Directory bread(block 295) failed
[  442.855682][T11174] FAT-fs (loop2): Directory bread(block 288) failed
[  442.869707][T11174] FAT-fs (loop2): Directory bread(block 289) failed
[  443.575166][ T7268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.643581][T11198] loop2: detected capacity change from 0 to 128
[  443.743421][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  443.765565][T11198] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  443.819773][T11203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2076'.
[  443.851983][ T2069] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  443.907846][T11206] loop4: detected capacity change from 0 to 1024
[  443.970064][T11206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.208363][T11225] loop5: detected capacity change from 0 to 256
[  444.268801][ T7047] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  444.281115][ T7047] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  444.371763][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'.
[  444.386830][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.486342][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2092'.
[  444.507697][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2092'.
[  444.642231][T11244] loop2: detected capacity change from 0 to 512
[  444.666710][T11244] EXT4-fs: Ignoring removed bh option
[  444.697198][T11244] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  444.783390][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  444.787727][T11244] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  444.839258][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'.
[  445.119317][T11257] netlink: 'syz.2.2099': attribute type 1 has an invalid length.
[  445.169949][T11257] bond1: entered promiscuous mode
[  445.241024][T11257] 8021q: adding VLAN 0 to HW filter on device bond1
[  445.264946][T11249] syzkaller0: entered promiscuous mode
[  445.301497][T11249] syzkaller0: entered allmulticast mode
[  445.519888][ T7047] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  445.551203][ T7047] hid-generic 0000:0000:0000.0028: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  445.640182][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'.
[  445.815625][T11282] netlink: 'syz.7.2106': attribute type 13 has an invalid length.
[  445.823831][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  445.853450][T11282] netlink: 'syz.7.2106': attribute type 17 has an invalid length.
[  446.204333][T11295] vcan0: tx drop: invalid da for name 0x0000000000000001
[  446.250421][T11282] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.311103][T11282] 8021q: adding VLAN 0 to HW filter on device team0
[  446.492123][T11282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  446.680516][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  446.680535][   T28] audit: type=1400 audit(2000000446.274:8811): avc:  denied  { bind } for  pid=11308 comm="syz.2.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  446.739389][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2115'.
[  446.769251][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2115'.
[  446.817903][T11311] team0: entered promiscuous mode
[  446.836223][T11311] team_slave_0: entered promiscuous mode
[  446.847000][T11311] team_slave_1: entered promiscuous mode
[  446.863390][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  446.872570][T11311] bond0: entered promiscuous mode
[  446.882358][T11311] bond_slave_0: entered promiscuous mode
[  446.900180][T11311] bond_slave_1: entered promiscuous mode
[  446.916292][T11311] debugfs: 'hsr1' already exists in 'hsr'
[  446.926285][T11311] Cannot create hsr debugfs directory
[  446.931937][T11311] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[  446.942702][T11311] 8021q: adding VLAN 0 to HW filter on device hsr1
[  447.055218][   T28] audit: type=1400 audit(2000000446.654:8812): avc:  denied  { execute } for  pid=11322 comm="syz.5.2118" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  447.089181][T11323] loop5: detected capacity change from 0 to 512
[  447.211142][   T28] audit: type=1400 audit(2000000446.804:8813): avc:  denied  { read } for  pid=11322 comm="syz.5.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  447.298505][T11288] Set syz1 is full, maxelem 65536 reached
[  447.636470][   T28] audit: type=1400 audit(2000000447.224:8814): avc:  denied  { map } for  pid=11343 comm="syz.5.2128" path="socket:[36149]" dev="sockfs" ino=36149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  447.735821][   T28] audit: type=1400 audit(2000000447.224:8815): avc:  denied  { read } for  pid=11343 comm="syz.5.2128" path="socket:[36149]" dev="sockfs" ino=36149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  447.782385][   T28] audit: type=1400 audit(2000000447.234:8816): avc:  denied  { setattr } for  pid=11343 comm="syz.5.2128" name="NETLINK" dev="sockfs" ino=36148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  447.899558][T11357] loop2: detected capacity change from 0 to 128
[  447.906751][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  447.930541][T11357] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  447.987283][ T2069] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  448.066719][T11367] vcan0: tx address claim with different name
[  448.226046][T11377] loop2: detected capacity change from 0 to 512
[  448.555657][   T28] audit: type=1400 audit(2000000448.154:8817): avc:  denied  { getopt } for  pid=11391 comm="syz.7.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  448.598816][T11384] loop4: detected capacity change from 0 to 1024
[  448.607130][T11394] bond0: Device is already in use.
[  448.645044][T11384] EXT4-fs: Ignoring removed mblk_io_submit option
[  448.675911][T11384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  448.707614][T11384] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  448.731698][T11384] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.2143: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  448.752492][T11384] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  448.752630][T11384] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2143: couldn't read orphan inode 11 (err -117)
[  448.761851][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  448.761879][    C0] EXT4-fs (loop4): initial error at time 2000000448: ext4_ext_check_inode:521: inode 11
[  448.761910][    C0] EXT4-fs (loop4): last error at time 2000000448: ext4_ext_check_inode:521: inode 11
[  448.808492][T11384] loop4: lost filesystem error report for type 5 error -117
[  448.809569][T11384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.838730][   T28] audit: type=1400 audit(2000000448.434:8818): avc:  denied  { setattr } for  pid=11383 comm="syz.4.2143" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  448.866975][T11384] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2143: Invalid block bitmap block 0 in block_group 0
[  448.886928][T11384] Quota error (device loop4): write_blk: dquota write failed
[  448.899597][T11384] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  448.920809][T11384] EXT4-fs error (device loop4): ext4_acquire_dquot:7028: comm syz.4.2143: Failed to acquire dquot type 0
[  448.943400][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  448.967475][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.126694][T11429] loop5: detected capacity change from 0 to 1024
[  449.196618][T11429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.936523][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.962226][T11424] kexec: Could not allocate control_code_buffer
[  449.983391][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  450.141203][T11446] tipc: Started in network mode
[  450.154562][T11446] tipc: Node identity f6bc500c290a, cluster identity 4711
[  450.164656][T11446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.176697][T11446] syzkaller0: entered promiscuous mode
[  450.186306][T11446] syzkaller0: entered allmulticast mode
[  450.217814][T11450] loop7: detected capacity change from 0 to 128
[  450.227647][T11446] tipc: Resetting bearer <eth:syzkaller0>
[  450.264816][T11445] tipc: Resetting bearer <eth:syzkaller0>
[  450.279279][T11445] tipc: Disabling bearer <eth:syzkaller0>
[  450.795117][T11460] loop7: detected capacity change from 0 to 128
[  450.909478][T11460] bio_check_eod: 33 callbacks suppressed
[  450.909499][T11460] syz.7.2166: attempt to access beyond end of device
[  450.909499][T11460] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128
[  450.944207][T11460] syz.7.2166: attempt to access beyond end of device
[  450.944207][T11460] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128
[  450.998894][T11460] buffer_io_error: 18 callbacks suppressed
[  450.998917][T11460] Buffer I/O error on dev loop7, logical block 79, lost async page write
[  451.023402][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  451.031677][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'.
[  451.039356][T11460] syz.7.2166: attempt to access beyond end of device
[  451.039356][T11460] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128
[  451.085941][T11460] Buffer I/O error on dev loop7, logical block 80, lost async page write
[  451.120110][T11460] syz.7.2166: attempt to access beyond end of device
[  451.120110][T11460] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128
[  451.169772][T11460] syz.7.2166: attempt to access beyond end of device
[  451.169772][T11460] loop7: rw=2049, sector=166, nr_sectors = 2 limit=128
[  451.218338][T11460] Buffer I/O error on dev loop7, logical block 83, lost async page write
[  451.242472][T11460] syz.7.2166: attempt to access beyond end of device
[  451.242472][T11460] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128
[  451.295996][T11460] Buffer I/O error on dev loop7, logical block 84, lost async page write
[  451.314471][T11460] syz.7.2166: attempt to access beyond end of device
[  451.314471][T11460] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128
[  451.366235][T11460] syz.7.2166: attempt to access beyond end of device
[  451.366235][T11460] loop7: rw=2049, sector=190, nr_sectors = 2 limit=128
[  451.411906][T11460] Buffer I/O error on dev loop7, logical block 95, lost async page write
[  451.456895][T11460] syz.7.2166: attempt to access beyond end of device
[  451.456895][T11460] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128
[  451.499268][T11460] Buffer I/O error on dev loop7, logical block 96, lost async page write
[  451.531424][T11460] syz.7.2166: attempt to access beyond end of device
[  451.531424][T11460] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128
[  451.566997][T11460] Buffer I/O error on dev loop7, logical block 99, lost async page write
[  451.591153][T11460] Buffer I/O error on dev loop7, logical block 100, lost async page write
[  451.616538][T11460] Buffer I/O error on dev loop7, logical block 111, lost async page write
[  451.628551][T11460] Buffer I/O error on dev loop7, logical block 112, lost async page write
[  451.726022][T11476] ==================================================================
[  451.734715][T11476] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace
[  451.742148][T11476] 
[  451.744505][T11476] write to 0xffff888105db0500 of 8 bytes by task 11474 on cpu 0:
[  451.752256][T11476]  mas_wmb_replace+0x20d/0x1610
[  451.757159][T11476]  mas_wr_store_entry+0x16b6/0x2db0
[  451.762404][T11476]  mas_store_prealloc+0x72e/0xa40
[  451.767573][T11476]  vma_complete+0x3c7/0x850
[  451.772223][T11476]  __split_vma+0x5db/0x640
[  451.776771][T11476]  vma_modify+0xbc9/0xd00
[  451.781140][T11476]  vma_modify_flags+0x182/0x210
[  451.786175][T11476]  mprotect_fixup+0x312/0x5d0
[  451.790985][T11476]  do_mprotect_pkey+0x67b/0x920
[  451.796227][T11476]  __x64_sys_mprotect+0x48/0x60
[  451.801226][T11476]  x64_sys_call+0x2768/0x3020
[  451.805961][T11476]  do_syscall_64+0x12c/0x3b0
[  451.810684][T11476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.816687][T11476] 
[  451.819078][T11476] read to 0xffff888105db0500 of 8 bytes by task 11476 on cpu 1:
[  451.826728][T11476]  mas_state_walk+0x485/0x650
[  451.831437][T11476]  mas_walk+0x60/0x150
[  451.835534][T11476]  lock_vma_under_rcu+0xc9/0x210
[  451.840532][T11476]  do_user_addr_fault+0x232/0x1050
[  451.845683][T11476]  exc_page_fault+0x62/0xa0
[  451.850211][T11476]  asm_exc_page_fault+0x26/0x30
[  451.855093][T11476] 
[  451.857435][T11476] value changed: 0xffff88811907a8c1 -> 0xffff888105db0500
[  451.864565][T11476] 
[  451.866918][T11476] Reported by Kernel Concurrency Sanitizer on:
[  451.873176][T11476] CPU: 1 UID: 0 PID: 11476 Comm: syz.1.2173 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  451.884518][T11476] Tainted: [W]=WARN
[  451.888351][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  451.898469][T11476] ==================================================================
[  452.063403][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  453.103409][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  454.143451][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  455.183456][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  456.223486][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  457.273441][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  458.313446][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  459.343447][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  460.383453][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  461.423490][    C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available