last executing test programs:

4m33.866497129s ago: executing program 4 (id=1246):
msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

4m33.685188199s ago: executing program 4 (id=1251):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x18522, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a02fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736369dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48)

4m32.749642475s ago: executing program 4 (id=1254):
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x17, 0x7fffffff}]})

4m31.755823914s ago: executing program 4 (id=1265):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x8000, 0xffff, 0xfffd, 0x20})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xd, 0x3}, {0xa}, {0x40d, 0x8003}, {0x1, 0x45}, {0x6, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000180)=""/14, 0x7f, 0xe, 0x1, 0x4}, 0x28)
syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==")
r2 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]})
pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000006fe5e40cf1b400b3d550000000109021200014300a00009ac89a779981c5f69ae8704a600000e010000b18beebab4057565a9f628e745d0f81c32b2aa46dc1ef09562673f433c236783701f38d44d398938eefe56fabeb98028f3b96d0ddbb2671db5"], 0x0)

4m30.874563816s ago: executing program 4 (id=1272):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r1, 0x43f6, 0x3, 0x0, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)

4m30.662346248s ago: executing program 4 (id=1278):
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x400880)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000700)={0x0, 0x2, 0x1, 'queue1\x00', 0xe})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

4m30.619191981s ago: executing program 32 (id=1278):
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x400880)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000700)={0x0, 0x2, 0x1, 'queue1\x00', 0xe})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

1m50.209392828s ago: executing program 0 (id=2490):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0xa6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')

1m50.098700184s ago: executing program 0 (id=2481):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080)
socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
read$snapshot(0xffffffffffffffff, &(0x7f00000004c0)=""/227, 0xe3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r3, 0xb15, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008044)

1m49.051666157s ago: executing program 0 (id=2484):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

1m48.972124911s ago: executing program 0 (id=2485):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
unshare(0xa000200)
r1 = semget$private(0x0, 0x4000, 0x0)
semtimedop(r1, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0)
unshare(0x20060400)
r2 = syz_clone3(&(0x7f0000000540)={0x200000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x20}, &(0x7f0000000380)=""/155, 0x9b, &(0x7f0000000440)=""/248, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
sched_setaffinity(r2, 0x8, &(0x7f00000005c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48)

1m47.922538434s ago: executing program 0 (id=2498):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040801}, 0x20000040)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
ftruncate(0xffffffffffffffff, 0x2007ffc)
lseek(0xffffffffffffffff, 0x3c, 0x4)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
fcntl$dupfd(r1, 0x406, r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x7}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00')
ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f00000002c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0)

1m47.298668921s ago: executing program 0 (id=2507):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "3c8d6ed996959079", "6a8c559b1df27b094c6b646d7fa5fdfe", "afb069a3", "0000000000000006"}, 0x28)
r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1m47.298389061s ago: executing program 33 (id=2507):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "3c8d6ed996959079", "6a8c559b1df27b094c6b646d7fa5fdfe", "afb069a3", "0000000000000006"}, 0x28)
r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1m21.1560226s ago: executing program 6 (id=2696):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10)
preadv(r1, 0x0, 0x0, 0x10000, 0x401)
r2 = socket$inet6(0xa, 0x3, 0x3)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x40083}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
sendmmsg$inet(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000ec0)="708307d3e357bf9dc2e9505d343cbfe3da86f1ef7bafc59397b8a256743bcb66a911b327dae33e30c629845aa6ca8e0c566e362db1a35852d6daf8c9fd497bcb2599da1fb761580fb48b4e997084b97d4173696599c85e8c757dcaedf264aa4f8f7c15b7861beda965604fa2c9940ccc31bc2e274e7396b9caa06c77d84fce56ad7683c12d794d70b97b75a7676ec1e228972cdfc0fb2969656b91014f95abbd073e51c8ec6ae5c38c825b60841661bad06d95674cc2389dbdedad88", 0xbc}, {0x0}, {&(0x7f0000001080)="49215bccebc8a00e8eced196d69df4791b546721e808879b7b525a1bbdddd89ad46912c2320098f4a018e7808fc3d31b9d71316e1744e1ab2e91886f033de701d11102b1d732f46ebe70f5be696fe4c601c2383334cdc7010af4ca897858ed77ba4b8f4f1345105887d381deee77b8a511f3a802dcc0620ace54561573813ced951b3b96be6dd24fad6e40c0195e526f17d956bc360fd244c69179d4b910217ccaf400f8c0324a152a0471213498a82fd613f556514f49b4e4d8f7e9a2a30e4eb52622449661db", 0xc7}, {&(0x7f0000001180)}, {&(0x7f0000001240)="a05b9741c1fa370ebe48f69f51f8793e40e515bb03f8b61b401da04bf123797251ba7527fc3a4b307327732b5bc6a1554ae177a367b56dd8cf799ddd2ec3c6ea8b7120dd870e8e70a4db1fe6ad1ac120aceeaf7a54bfcf5a25de9372fdd6cd7f732b3e434e3d71b1d64b5fb15c74f65c0c61733b8fb3f8d5672a659c7f110f5fe042cae80c206f3c2f959bcebfc29ac7ef0e7dfb4dbad201cecc5fd1f515cb1673b797c488f87c9d6ff62b268cb00d77df2da0ee05b4e10e0f4f3540c63a7498f57d2af2", 0xc4}, {&(0x7f0000001340)}, {&(0x7f0000001500)}], 0x7}}, {{&(0x7f0000002680)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x3, 0x8004)

1m20.718060826s ago: executing program 6 (id=2699):
socket$kcm(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@errors_remount}, {@nolazytime}]}, 0x1, 0x46b, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x9, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
futimesat(r5, 0x0, &(0x7f0000000080))
connect$pppl2tp(r4, &(0x7f0000019380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e2b, @remote}, 0x2000001}}, 0x2e)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x558, &(0x7f0000000340)="$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")
socket$inet6_mptcp(0xa, 0x1, 0x106)

1m19.782336891s ago: executing program 6 (id=2702):
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='\t', 0x1, 0x40, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @private2, 0x475b}, 0x1c)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140), 0x0)
r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff0, 0x0, 0x4)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}})
io_uring_enter(r1, 0x68be, 0x5002, 0x4, 0x0, 0x0)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
listen(0xffffffffffffffff, 0x7f)
shutdown(0xffffffffffffffff, 0x2)
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb3d)
ioctl$TCXONC(r5, 0x540a, 0x2)

1m19.419040713s ago: executing program 6 (id=2717):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "3c8d6ed996959079", "6a8c559b1df27b094c6b646d7fa5fdfe", "afb069a3", "0000000000000006"}, 0x28)
r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1m17.848177496s ago: executing program 6 (id=2712):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
unshare(0xa000200)
r1 = semget$private(0x0, 0x4000, 0x0)
semtimedop(r1, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0)
unshare(0x20060400)
r2 = syz_clone3(&(0x7f0000000540)={0x200000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x20}, &(0x7f0000000380)=""/155, 0x9b, &(0x7f0000000440)=""/248, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
sched_setaffinity(r2, 0x8, &(0x7f00000005c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48)

1m16.924633581s ago: executing program 6 (id=2723):
socket$kcm(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080045)

1m1.775337299s ago: executing program 34 (id=2723):
socket$kcm(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080045)

7.140516817s ago: executing program 7 (id=3073):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0xa6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1, 0x131, 0x0)

6.962541297s ago: executing program 7 (id=3077):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)

5.984066545s ago: executing program 1 (id=3079):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x51, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x841}, 0x0)

4.879165651s ago: executing program 7 (id=3083):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x4040850)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
bind$rxrpc(r2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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")
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
socket$inet(0x2, 0x80001, 0x84)

3.322551393s ago: executing program 1 (id=3087):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0xa6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1, 0x131, 0x0)

3.02688653s ago: executing program 1 (id=3088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = io_uring_setup(0x6a54, &(0x7f0000000000)={0x0, 0xea74, 0x8, 0x1, 0x342})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32000000001400000011"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
io_uring_enter(r2, 0x6259, 0xfb6e, 0x23, &(0x7f0000000100)={[0x7]}, 0x8)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0xb4, r1, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

2.678667821s ago: executing program 7 (id=3091):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r1, 0x8b25714e)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x8000000000000001, 0xf60e}, 0x19096, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0xae, 0xde6e, 0x5)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30)

2.052669748s ago: executing program 3 (id=3093):
unshare(0x400)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c1400", @ANYRES64], 0x24}}, 0x4000000)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.877321799s ago: executing program 5 (id=3095):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002000300", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.773943875s ago: executing program 1 (id=3096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r7 = socket(0xa, 0x801, 0x0)
r8 = gettid()
tkill(r8, 0x7)
capset(&(0x7f0000000000)={0x20071026, r8}, &(0x7f0000000040)={0x2f, 0x0, 0x2, 0x3, 0x8, 0x9})
getsockopt(r7, 0x29, 0x43, &(0x7f0000b3ffac)=""/69, &(0x7f0000001ffc)=0x45)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}})
ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f00000000c0)=0x5)
io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)

1.773747475s ago: executing program 5 (id=3097):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x4018, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
socket$inet(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f0000001cc0), 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

1.670352031s ago: executing program 5 (id=3098):
socket$netlink(0x10, 0x3, 0xf)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2d0, &(0x7f00000004c0)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', <r3=>0x0})
setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080), 0x4)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r4 = syz_open_pts(r0, 0x0)
r5 = dup3(r4, r0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x12)

1.484088202s ago: executing program 3 (id=3099):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0xa6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1, 0x131, 0x0)

1.451852044s ago: executing program 3 (id=3100):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]})
r2 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
clock_gettime(0x2, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x80)
fchdir(r5)
symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r6, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

1.217932527s ago: executing program 3 (id=3101):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.053342757s ago: executing program 3 (id=3102):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
ioprio_set$uid(0x3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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")

866.126679ms ago: executing program 1 (id=3103):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, 0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000"], 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc}, [@map_fd={0x18, 0xa, 0x1, 0x0, r5}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, 0x0, 0x8000194)

845.5746ms ago: executing program 5 (id=3104):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000000)="47a703", 0x0, 0x0, 0x0, 0x6, r0}, 0x38)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x46e}, @generic={0xb9, 0x4, 0x3, 0x401, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @generic={0x3, 0x8, 0x3, 0x4, 0xffff37f1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1, 0x1, 0x8}, 0x2c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000300))
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000480)={{0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e21, 0x3, 'lc\x00', 0x23, 0x81, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0xa, 0x12d58}}, 0x44)

781.650634ms ago: executing program 5 (id=3105):
socket$inet_sctp(0x2, 0x5, 0x84)

762.538365ms ago: executing program 5 (id=3106):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
semget$private(0x0, 0x207, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0)
sendfile(r2, r1, 0x0, 0x100000000)
semctl$GETZCNT(0x0, 0x3, 0xf, &(0x7f0000000240)=""/41)
r5 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x410fd, 0x40, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socketpair(0x28, 0x800, 0x28, &(0x7f00000002c0))
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x5000}, 0x2004c040)
sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x40000)

447.749163ms ago: executing program 3 (id=3108):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x6025, 0x4007, 0xb, 0x4, 0x1, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @private, @multicast1}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0xfffffffe}, 0x8)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x203}, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x29, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0xdb4, 0xf258, 0x5, 0x0, 0x0)

443.748554ms ago: executing program 2 (id=3118):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804)
close(r4)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

371.817278ms ago: executing program 2 (id=3109):
r0 = socket(0x2b, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x220c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x7)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

341.22644ms ago: executing program 2 (id=3110):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0xa6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1, 0x131, 0x0)

269.470474ms ago: executing program 2 (id=3111):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x40, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@getnexthop={0x20, 0x76, 0xb0d, 0x20, 0x25dfdbff, {0x3}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0x2, 0xfff3}, {0x1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

204.665367ms ago: executing program 7 (id=3112):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]})
r2 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
clock_gettime(0x2, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x80)
fchdir(r5)
symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r6, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

197.541248ms ago: executing program 2 (id=3113):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb474, 0x8001, 0x4, 0x8, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

72.002736ms ago: executing program 2 (id=3114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x3, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5)

58.097346ms ago: executing program 7 (id=3115):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000040)})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x2})
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
r6 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0)
sendfile(r5, r4, 0x0, 0x3ffff)
write(r3, &(0x7f0000000a00)="c7", 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

0s ago: executing program 1 (id=3116):
socket$inet_sctp(0x2, 0x5, 0x84)

kernel console output (not intermixed with test programs):

known, defaulting to 1000
[  286.740677][T10735] syzkaller0: entered promiscuous mode
[  286.757033][T10735] syzkaller0: entered allmulticast mode
[  287.501384][T10747] lo speed is unknown, defaulting to 1000
[  287.536263][T10749] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  288.096815][T10764] lo speed is unknown, defaulting to 1000
[  288.154958][   T28] audit: type=1326 audit(1771255109.043:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  288.294738][   T28] audit: type=1326 audit(1771255109.043:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  288.329136][   T28] audit: type=1326 audit(1771255109.043:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  288.405298][   T28] audit: type=1326 audit(1771255109.043:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  288.448473][   T28] audit: type=1326 audit(1771255109.053:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  288.524696][   T28] audit: type=1326 audit(1771255109.053:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  288.807537][   T28] audit: type=1326 audit(1771255109.053:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  288.904638][   T28] audit: type=1326 audit(1771255109.053:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  288.970093][   T28] audit: type=1326 audit(1771255109.053:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  289.236381][T10791] lo speed is unknown, defaulting to 1000
[  289.336070][T10794] lo speed is unknown, defaulting to 1000
[  289.486904][T10799] v: renamed from ip6_vti0
[  289.585513][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'.
[  289.783218][T10811] netlink: 'syz.3.2291': attribute type 2 has an invalid length.
[  289.853646][T10811] netlink: 'syz.3.2291': attribute type 4 has an invalid length.
[  289.874903][T10811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2291'.
[  291.376270][T10833] loop5: detected capacity change from 0 to 4096
[  291.500998][T10837] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  291.516894][T10833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.598039][   T28] kauditd_printk_skb: 59 callbacks suppressed
[  291.598055][   T28] audit: type=1400 audit(2000000003.220:1072): avc:  denied  { create } for  pid=10831 comm="syz.5.2297" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  291.732295][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.104599][   T28] audit: type=1400 audit(2000000003.710:1073): avc:  denied  { write } for  pid=10842 comm="syz.5.2300" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  292.940791][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'.
[  293.117150][   T28] audit: type=1400 audit(2000000004.740:1074): avc:  denied  { connect } for  pid=10860 comm="syz.5.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  293.496905][T10868] lo speed is unknown, defaulting to 1000
[  293.555540][T10873] bond5: option mode: unable to set because the bond device is up
[  293.643049][T10874] v: renamed from ip6_vti0 (while UP)
[  293.662101][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'.
[  293.692439][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'.
[  293.740426][T10873] erspan0: left allmulticast mode
[  293.749311][T10873] erspan0: left promiscuous mode
[  293.760607][T10873] GPL: port 1(erspan0) entered disabled state
[  293.777576][T10873] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  293.871183][T10869] lo speed is unknown, defaulting to 1000
[  295.856767][T10904] lo speed is unknown, defaulting to 1000
[  297.523467][T10942] loop3: detected capacity change from 0 to 512
[  297.566056][T10942] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2338: iget: bad i_size value: 38620345925642
[  297.583164][T10942] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  297.583337][T10942] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2338: couldn't read orphan inode 15 (err -117)
[  297.595166][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  297.595185][    C0] EXT4-fs (loop3): initial error at time 2000000009: ext4_orphan_get:1391: inode 15
[  297.595269][    C0] EXT4-fs (loop3): last error at time 2000000009: ext4_orphan_get:1391: inode 15
[  297.634406][T10942] loop3: lost filesystem error report for type 5 error -117
[  297.640540][T10942] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.669448][T10942] EXT4-fs (loop3): shut down requested (0)
[  297.716744][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  298.007181][   T28] audit: type=1326 audit(2000000009.630:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.037387][   T28] audit: type=1326 audit(2000000009.630:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.274711][   T28] audit: type=1326 audit(2000000009.630:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.391261][   T28] audit: type=1326 audit(2000000009.630:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.481241][   T28] audit: type=1326 audit(2000000009.630:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.530245][   T28] audit: type=1326 audit(2000000009.630:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.647891][   T28] audit: type=1326 audit(2000000009.630:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.682870][T10964] loop5: detected capacity change from 0 to 512
[  298.697362][   T28] audit: type=1326 audit(2000000009.630:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.725838][T10964] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  298.757493][T10966] lo speed is unknown, defaulting to 1000
[  298.765904][   T28] audit: type=1326 audit(2000000009.630:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.813306][T10964] EXT4-fs (loop5): orphan cleanup on readonly fs
[  298.820744][T10964] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.2334: Block bitmap for bg 0 marked uninitialized
[  298.851223][   T28] audit: type=1326 audit(2000000009.630:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.1.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f59d063bf79 code=0x7ffc0000
[  298.871060][T10964] loop5: lost filesystem error report for type 5 error -117
[  298.892120][T10970] v: renamed from ip6_vti0
[  298.899573][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  298.899591][    C1] EXT4-fs (loop5): initial error at time 2000000010: ext4_read_block_bitmap_nowait:517
[  298.899621][    C1] EXT4-fs (loop5): last error at time 2000000010: ext4_read_block_bitmap_nowait:517
[  298.938583][T10964] EXT4-fs (loop5): Remounting filesystem read-only
[  298.953071][T10964] EXT4-fs (loop5): 1 orphan inode deleted
[  298.959545][T10964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  299.039249][T10964] netlink: 212892 bytes leftover after parsing attributes in process `syz.5.2334'.
[  299.047079][ T4721] Bluetooth: hci0: Frame reassembly failed (-84)
[  299.086073][T10968] lo speed is unknown, defaulting to 1000
[  299.124819][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.238014][T10975] lo speed is unknown, defaulting to 1000
[  301.082919][ T7006] Bluetooth: hci0: command 0x1003 tx timeout
[  301.088971][ T3944] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  301.697336][T11024] lo speed is unknown, defaulting to 1000
[  301.796497][T11031] lo speed is unknown, defaulting to 1000
[  303.583218][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'.
[  303.647128][T11059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2372'.
[  303.745238][T11062] lo speed is unknown, defaulting to 1000
[  303.751410][T11062] lo speed is unknown, defaulting to 1000
[  303.751863][T11057] lo speed is unknown, defaulting to 1000
[  303.782454][T11062] lo speed is unknown, defaulting to 1000
[  303.843946][T11062] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  303.862239][T11069] tipc: Failed to remove unknown binding: 66,0,0/0:3644491496/3644491498
[  303.872638][T11069] tipc: Failed to remove unknown binding: 66,0,0/0:3644491496/3644491497
[  303.920305][T11062] lo speed is unknown, defaulting to 1000
[  303.946549][T11062] lo speed is unknown, defaulting to 1000
[  304.035133][T11062] lo speed is unknown, defaulting to 1000
[  304.084377][T11062] lo speed is unknown, defaulting to 1000
[  304.092030][T11062] lo speed is unknown, defaulting to 1000
[  304.148462][T11062] lo speed is unknown, defaulting to 1000
[  304.457471][T11084] loop5: detected capacity change from 0 to 1024
[  304.494408][T11084] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  304.527177][T11084] JBD2: no valid journal superblock found
[  304.543810][T11084] EXT4-fs (loop5): Could not load journal inode
[  304.570693][T11084] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[  304.847475][T11095] lo speed is unknown, defaulting to 1000
[  304.976932][T11095] lo speed is unknown, defaulting to 1000
[  304.995696][T11106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11106 comm=syz.3.2376
[  305.014918][T11102] lo speed is unknown, defaulting to 1000
[  305.118420][T11110] xt_CT: You must specify a L4 protocol and not use inversions on it
[  305.236360][T11102] lo speed is unknown, defaulting to 1000
[  306.615055][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2384'.
[  308.239340][T11178] loop3: detected capacity change from 0 to 512
[  308.442657][T11178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.777826][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2401'.
[  308.813046][   T28] kauditd_printk_skb: 79 callbacks suppressed
[  308.813070][   T28] audit: type=1400 audit(2000000020.351:1164): avc:  denied  { ioctl } for  pid=11189 comm="syz.2.2403" path="socket:[57410]" dev="sockfs" ino=57410 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  309.015133][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.270643][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2405'.
[  309.438544][T11210] veth13: entered allmulticast mode
[  310.582846][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2420'.
[  312.623432][T11261] xt_CT: You must specify a L4 protocol and not use inversions on it
[  312.639152][T11255] macvtap1: entered promiscuous mode
[  312.663287][T11255] bridge0: entered promiscuous mode
[  312.704369][T11255] macvtap1: entered allmulticast mode
[  312.710529][T11255] bridge0: entered allmulticast mode
[  312.744174][T11255] bridge0: port 3(macvtap1) entered blocking state
[  312.776015][T11255] bridge0: port 3(macvtap1) entered disabled state
[  312.836198][T11255] bridge0: left allmulticast mode
[  312.844854][T11255] bridge0: left promiscuous mode
[  312.905918][T11271] 8021q: adding VLAN 0 to HW filter on device bond6
[  312.946580][T11273] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  313.127031][T11273] bond6: (slave macvlan2): Enslaving as an active interface with a down link
[  314.576866][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'.
[  314.629676][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'.
[  316.734696][T11354] bond3: (slave macvlan2): Error -22 calling dev_set_mtu
[  317.022697][T11359] netlink: 'syz.0.2456': attribute type 1 has an invalid length.
[  317.062586][T11362] netlink: 'syz.3.2457': attribute type 13 has an invalid length.
[  317.099281][T11359] 8021q: adding VLAN 0 to HW filter on device bond6
[  317.467994][   T10] lo speed is unknown, defaulting to 1000
[  317.492577][   T10] syz0: Port: 1 Link DOWN
[  317.505564][T11365] 8021q: adding VLAN 0 to HW filter on device bond6
[  317.513781][T11365] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  317.526482][T11365] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  317.543593][T11359] gretap1: entered promiscuous mode
[  317.551809][T11359] bond6: (slave gretap1): making interface the new active one
[  317.601783][T11359] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  317.644623][T11366] macvlan4: entered promiscuous mode
[  317.650317][T11366] macvlan4: entered allmulticast mode
[  317.656827][T11366] bond6: entered promiscuous mode
[  317.662819][T11366] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  317.678388][T11369] loop5: detected capacity change from 0 to 128
[  317.694299][T11366] bond6: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  317.700822][T11369] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  317.722172][ T3306] udevd[3306]: incorrect ext4 checksum on /dev/loop5
[  317.735061][T11366] bond6: left promiscuous mode
[  317.744144][ T3306] udevd[3306]: incorrect ext4 checksum on /dev/loop5
[  317.763758][  T115] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  317.774146][  T115] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.802095][  T115] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  317.811792][  T115] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.821754][   T10] lo speed is unknown, defaulting to 1000
[  317.828000][  T115] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  317.861980][  T115] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.870959][  T115] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  317.922119][  T115] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.967574][T11382] rdma_rxe: rxe_newlink: failed to add lo
[  318.010293][T11386] loop3: detected capacity change from 0 to 128
[  318.079001][T11392] bridge0: port 1(team_slave_0) entered blocking state
[  318.088767][T11392] bridge0: port 1(team_slave_0) entered disabled state
[  318.099510][T11392] team_slave_0: entered allmulticast mode
[  318.109536][T11392] team_slave_0: entered promiscuous mode
[  318.199459][T11386] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  318.628244][T11386] ext4 filesystem being mounted at /453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  319.411161][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  319.437394][T11403] netlink: 'syz.2.2468': attribute type 8 has an invalid length.
[  319.550897][T11410] netlink: 'syz.2.2470': attribute type 13 has an invalid length.
[  319.895206][T11412] geneve2: entered promiscuous mode
[  319.973741][ T6691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.001395][ T6691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.125180][ T6691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.157619][ T6691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.452966][T11423] Bluetooth: hci0: Frame reassembly failed (-84)
[  320.460589][ T6691] Bluetooth: hci0: Frame reassembly failed (-84)
[  320.497430][T11421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=11421 comm=syz.2.2472
[  322.523118][ T3944] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  322.617754][   T28] audit: type=1326 audit(2000000034.211:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  322.917387][   T28] audit: type=1326 audit(2000000034.211:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  322.947533][   T28] audit: type=1326 audit(2000000034.221:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  323.000296][T11475] loop5: detected capacity change from 0 to 512
[  323.012553][T11475] EXT4-fs: Ignoring removed oldalloc option
[  323.038489][   T28] audit: type=1326 audit(2000000034.231:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  323.075839][   T28] audit: type=1326 audit(2000000034.231:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  323.124063][   T28] audit: type=1326 audit(2000000034.241:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  323.180374][   T28] audit: type=1326 audit(2000000034.241:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  323.222824][   T28] audit: type=1326 audit(2000000034.241:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  323.257454][T11475] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2496: Parent and EA inode have the same ino 15
[  323.271402][T11475] loop5: lost filesystem error report for type 5 error -117
[  323.271724][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  323.290701][    C0] EXT4-fs (loop5): initial error at time 2000000034: ext4_xattr_inode_iget:437
[  323.301185][    C0] EXT4-fs (loop5): last error at time 2000000034: ext4_xattr_inode_iget:437
[  323.317508][   T28] audit: type=1326 audit(2000000034.281:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  323.348616][   T28] audit: type=1326 audit(2000000034.281:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42203bf79 code=0x7ffc0000
[  323.395733][T11475] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2496: Parent and EA inode have the same ino 15
[  323.417809][T11475] loop5: lost filesystem error report for type 5 error -117
[  323.418235][T11475] EXT4-fs (loop5): 1 orphan inode deleted
[  323.435197][T11475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.466299][T11475] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2496: deleted inode referenced: 15
[  323.528540][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.668548][T11502] loop5: detected capacity change from 0 to 128
[  324.303821][T11513] lo speed is unknown, defaulting to 1000
[  324.432670][T11513] lo speed is unknown, defaulting to 1000
[  324.534071][T11513] chnl_net:caif_netlink_parms(): no params data found
[  324.652483][T11513] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.681892][T11513] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.703165][T11513] bridge_slave_0: entered allmulticast mode
[  324.765532][T11516] loop5: detected capacity change from 0 to 512
[  324.864955][T11513] bridge_slave_0: entered promiscuous mode
[  324.868576][T11516] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.905732][T11513] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.916137][T11513] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.924592][T11513] bridge_slave_1: entered allmulticast mode
[  324.932717][T11513] bridge_slave_1: entered promiscuous mode
[  324.957698][T11513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.971880][T11513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.996488][T11513] team0: Port device team_slave_0 added
[  325.006095][T11513] team0: Port device team_slave_1 added
[  325.015280][T11516] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  325.027336][T11513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.038770][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.070244][T11513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.120690][T11513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.155980][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.195227][T11513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.346212][T11557] netlink: 'syz.5.2521': attribute type 1 has an invalid length.
[  325.368433][T11513] hsr_slave_0: entered promiscuous mode
[  325.377829][T11513] hsr_slave_1: entered promiscuous mode
[  325.385026][T11513] debugfs: 'hsr0' already exists in 'hsr'
[  325.393051][T11513] Cannot create hsr debugfs directory
[  325.468146][T11557] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  325.546588][T11557] veth3: entered promiscuous mode
[  325.554985][T11557] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  325.601709][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2521'.
[  325.784827][T11513] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  326.133646][T11513] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  326.188381][T11571] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2524'.
[  326.213724][T11571] netlink: zone id is out of range
[  326.219592][T11571] netlink: zone id is out of range
[  326.258695][T11571] netlink: zone id is out of range
[  326.490190][T11571] netlink: set zone limit has 8 unknown bytes
[  326.520113][T11513] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  326.555658][T11513] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  326.674183][T11513] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.698266][T11513] 8021q: adding VLAN 0 to HW filter on device team0
[  326.727392][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.735695][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.807489][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.816492][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.932611][T11591] netlink: 'syz.5.2529': attribute type 13 has an invalid length.
[  326.990503][T11513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.445243][T11513] veth0_vlan: entered promiscuous mode
[  327.526683][T11513] veth1_vlan: entered promiscuous mode
[  327.663179][T11513] veth0_macvtap: entered promiscuous mode
[  327.724479][T11513] veth1_macvtap: entered promiscuous mode
[  327.807717][T11513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.876138][T11513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.903792][ T4721] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.934873][ T4721] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.015039][ T4721] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.049795][ T4721] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.071120][   T28] kauditd_printk_skb: 39 callbacks suppressed
[  328.071136][   T28] audit: type=1400 audit(2000000039.692:1214): avc:  denied  { mount } for  pid=11513 comm="syz-executor" name="/" dev="gadgetfs" ino=4824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  328.181055][T11630] lo speed is unknown, defaulting to 1000
[  328.203645][T11646] syzkaller0: entered promiscuous mode
[  328.209833][T11646] syzkaller0: entered allmulticast mode
[  328.309473][T11630] lo speed is unknown, defaulting to 1000
[  329.608693][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'.
[  329.649202][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2544'.
[  329.683387][  T115] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  329.695009][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'.
[  329.721365][  T115] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  329.735961][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2544'.
[  329.764526][  T115] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  329.794928][  T115] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  330.103648][   T28] audit: type=1326 audit(2000000041.732:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  330.168756][   T28] audit: type=1326 audit(2000000041.772:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  330.222374][   T28] audit: type=1326 audit(2000000041.772:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  330.254427][   T28] audit: type=1326 audit(2000000041.772:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  330.278775][   T28] audit: type=1326 audit(2000000041.772:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  330.304077][   T28] audit: type=1326 audit(2000000041.772:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  330.331964][   T28] audit: type=1326 audit(2000000041.772:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  330.364141][   T28] audit: type=1326 audit(2000000041.772:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  330.423363][   T28] audit: type=1326 audit(2000000041.772:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11664 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  331.216462][T11685] netlink: 'syz.1.2549': attribute type 13 has an invalid length.
[  331.228171][T11683] rdma_rxe: rxe_newlink: failed to add lo
[  331.236170][T11684] loop3: detected capacity change from 0 to 1024
[  331.259624][T11684] EXT4-fs: Ignoring removed oldalloc option
[  331.266956][T11684] EXT4-fs: Ignoring removed bh option
[  331.290548][T11684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.388656][T11688] geneve2: entered promiscuous mode
[  331.399212][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.435271][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.474605][T11695] loop6: detected capacity change from 0 to 256
[  331.482756][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.497187][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.529882][T11695] FAT-fs (loop6): Directory bread(block 64) failed
[  331.551045][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.573315][T11695] FAT-fs (loop6): Directory bread(block 65) failed
[  331.604918][T11695] FAT-fs (loop6): Directory bread(block 66) failed
[  331.622276][T11695] FAT-fs (loop6): Directory bread(block 67) failed
[  331.630395][T11695] FAT-fs (loop6): Directory bread(block 68) failed
[  331.649418][T11695] FAT-fs (loop6): Directory bread(block 69) failed
[  331.666627][T11695] FAT-fs (loop6): Directory bread(block 70) failed
[  331.691208][T11695] FAT-fs (loop6): Directory bread(block 71) failed
[  331.731844][T11695] FAT-fs (loop6): Directory bread(block 72) failed
[  331.771244][T11695] FAT-fs (loop6): Directory bread(block 73) failed
[  332.902807][T11757] lo speed is unknown, defaulting to 1000
[  332.975336][T11755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11755 comm=syz.1.2566
[  333.008729][T11757] lo speed is unknown, defaulting to 1000
[  333.038155][T11764] siw: device registration error -23
[  333.457312][   T28] kauditd_printk_skb: 102 callbacks suppressed
[  333.457327][   T28] audit: type=1400 audit(2000000045.082:1326): avc:  denied  { create } for  pid=11829 comm="syz.1.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  333.494930][T11830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11830 comm=syz.1.2569
[  333.512926][   T28] audit: type=1400 audit(2000000045.122:1327): avc:  denied  { listen } for  pid=11829 comm="syz.1.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  333.551581][   T28] audit: type=1400 audit(2000000045.122:1328): avc:  denied  { name_connect } for  pid=11829 comm="syz.1.2569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  333.585045][   T28] audit: type=1400 audit(2000000045.212:1329): avc:  denied  { read write } for  pid=11833 comm="syz.5.2570" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.748333][T11840] bridge0: entered promiscuous mode
[  333.755416][T11840] macvtap1: entered promiscuous mode
[  333.790285][T11840] macvtap1: entered allmulticast mode
[  333.850136][T11840] bridge0: entered allmulticast mode
[  333.896781][T11840] bridge0: port 4(macvtap1) entered blocking state
[  333.946693][T11840] bridge0: port 4(macvtap1) entered disabled state
[  334.060173][   T28] audit: type=1400 audit(2000000045.282:1330): avc:  denied  { open } for  pid=11833 comm="syz.5.2570" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  334.085456][   T28] audit: type=1400 audit(2000000045.492:1331): avc:  denied  { sys_module } for  pid=11837 comm="syz.3.2572" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  334.109335][T11840] bridge0: left allmulticast mode
[  334.116600][T11840] bridge0: left promiscuous mode
[  334.124448][   T28] audit: type=1400 audit(2000000045.752:1332): avc:  denied  { create } for  pid=11842 comm="syz.1.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  334.305185][T11854] loop3: detected capacity change from 0 to 512
[  334.324107][T11854] EXT4-fs: Ignoring removed oldalloc option
[  334.394070][   T28] audit: type=1400 audit(2000000046.022:1333): avc:  denied  { create } for  pid=11862 comm="syz.2.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  334.425363][T11854] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2575: Parent and EA inode have the same ino 15
[  334.441050][   T28] audit: type=1400 audit(2000000046.022:1334): avc:  denied  { getopt } for  pid=11862 comm="syz.2.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  334.464659][   T28] audit: type=1400 audit(2000000046.072:1335): avc:  denied  { create } for  pid=11855 comm="syz.6.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  334.480979][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2576'.
[  334.502803][T11854] loop3: lost filesystem error report for type 5 error -117
[  334.511066][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  334.525344][    C1] EXT4-fs (loop3): initial error at time 2000000046: ext4_xattr_inode_iget:437
[  334.534885][    C1] EXT4-fs (loop3): last error at time 2000000046: ext4_xattr_inode_iget:437
[  334.544992][T11866] loop6: detected capacity change from 0 to 512
[  334.569560][T11854] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2575: Parent and EA inode have the same ino 15
[  334.579325][T11856] lo speed is unknown, defaulting to 1000
[  334.583439][T11854] loop3: lost filesystem error report for type 5 error -117
[  334.583778][T11854] EXT4-fs (loop3): 1 orphan inode deleted
[  334.584295][T11854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.670306][T11854] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.2575: deleted inode referenced: 15
[  334.701505][T11856] lo speed is unknown, defaulting to 1000
[  334.742801][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.054003][T11891] lo speed is unknown, defaulting to 1000
[  335.355372][T11891] lo speed is unknown, defaulting to 1000
[  335.419225][T11892] siw: device registration error -23
[  336.145817][T11903] macvtap1: entered promiscuous mode
[  336.152585][T11903] bridge0: entered promiscuous mode
[  336.158245][T11903] macvtap1: entered allmulticast mode
[  336.164816][T11903] bridge0: entered allmulticast mode
[  336.245126][T11903] bridge0: port 1(macvtap1) entered blocking state
[  336.254416][T11903] bridge0: port 1(macvtap1) entered disabled state
[  336.317321][T11903] bridge0: left allmulticast mode
[  336.331337][T11903] bridge0: left promiscuous mode
[  336.704796][T11936] lo speed is unknown, defaulting to 1000
[  336.865432][T11936] lo speed is unknown, defaulting to 1000
[  336.879133][T11941] siw: device registration error -23
[  336.879960][T11946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.953840][T11946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.062195][T11949] netlink: 'syz.6.2604': attribute type 1 has an invalid length.
[  337.133771][T11950] veth3: entered promiscuous mode
[  337.180741][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2604'.
[  337.224830][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.235857][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.479079][T11954] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2605'.
[  337.512621][T11954] gretap0: entered promiscuous mode
[  337.529360][T11954] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.2605'.
[  337.540614][T11954] 0猉功D龌: renamed from gretap0
[  337.553476][T11954] 0猉功D龌: left promiscuous mode
[  337.559189][T11954] 0猉功D龌: entered allmulticast mode
[  337.872018][T11956] loop3: detected capacity change from 0 to 256
[  338.027316][T11956] FAT-fs (loop3): Directory bread(block 64) failed
[  338.062073][T11956] FAT-fs (loop3): Directory bread(block 65) failed
[  338.069114][T11956] FAT-fs (loop3): Directory bread(block 66) failed
[  338.081942][T11956] FAT-fs (loop3): Directory bread(block 67) failed
[  338.094843][T11956] FAT-fs (loop3): Directory bread(block 68) failed
[  338.101706][T11956] FAT-fs (loop3): Directory bread(block 69) failed
[  338.108274][T11956] FAT-fs (loop3): Directory bread(block 70) failed
[  338.169154][T11956] FAT-fs (loop3): Directory bread(block 71) failed
[  338.384212][T11956] FAT-fs (loop3): Directory bread(block 72) failed
[  338.393395][T11956] FAT-fs (loop3): Directory bread(block 73) failed
[  338.480274][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  338.480288][   T28] audit: type=1400 audit(2000000050.102:1353): avc:  denied  { create } for  pid=11955 comm="syz.3.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  338.538955][   T28] audit: type=1400 audit(2000000050.142:1354): avc:  denied  { setopt } for  pid=11955 comm="syz.3.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  338.558663][   T28] audit: type=1400 audit(2000000050.142:1355): avc:  denied  { name_bind } for  pid=11955 comm="syz.3.2618" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  338.580483][   T28] audit: type=1400 audit(2000000050.142:1356): avc:  denied  { node_bind } for  pid=11955 comm="syz.3.2618" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  338.601927][T11969] lo speed is unknown, defaulting to 1000
[  338.621866][   T28] audit: type=1400 audit(2000000050.252:1357): avc:  denied  { create } for  pid=11971 comm="syz.3.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  338.623615][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'.
[  338.654543][T11970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2611'.
[  338.670987][T11969] lo speed is unknown, defaulting to 1000
[  338.725282][T11969] siw: device registration error -23
[  338.784233][T11975] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  338.873851][T11988] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  338.942138][   T28] audit: type=1400 audit(2000000050.562:1358): avc:  denied  { getopt } for  pid=11990 comm="syz.1.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  339.014587][   T28] audit: type=1400 audit(2000000050.642:1359): avc:  denied  { create } for  pid=12001 comm="syz.2.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  339.064265][   T28] audit: type=1400 audit(2000000050.662:1360): avc:  denied  { bind } for  pid=12001 comm="syz.2.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  339.087312][   T28] audit: type=1400 audit(2000000050.662:1361): avc:  denied  { listen } for  pid=12001 comm="syz.2.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  339.119538][   T28] audit: type=1400 audit(2000000050.662:1362): avc:  denied  { connect } for  pid=12001 comm="syz.2.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  339.722488][T12008] loop5: detected capacity change from 0 to 256
[  339.748005][T12008] FAT-fs (loop5): Directory bread(block 64) failed
[  339.760013][T12008] FAT-fs (loop5): Directory bread(block 65) failed
[  339.766960][T12008] FAT-fs (loop5): Directory bread(block 66) failed
[  339.774018][T12008] FAT-fs (loop5): Directory bread(block 67) failed
[  339.780846][T12008] FAT-fs (loop5): Directory bread(block 68) failed
[  339.790099][T12008] FAT-fs (loop5): Directory bread(block 69) failed
[  339.797052][T12008] FAT-fs (loop5): Directory bread(block 70) failed
[  339.803939][T12008] FAT-fs (loop5): Directory bread(block 71) failed
[  339.810845][T12008] FAT-fs (loop5): Directory bread(block 72) failed
[  339.865360][T12008] FAT-fs (loop5): Directory bread(block 73) failed
[  339.876882][T12012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12012 comm=syz.3.2628
[  340.039111][T12017] lo speed is unknown, defaulting to 1000
[  340.100399][T12017] lo speed is unknown, defaulting to 1000
[  340.405024][T12035] syzkaller0: entered promiscuous mode
[  340.410618][T12035] syzkaller0: entered allmulticast mode
[  341.329259][T12060] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12060 comm=syz.2.2648
[  341.529930][T12059] lo speed is unknown, defaulting to 1000
[  342.205085][T12059] lo speed is unknown, defaulting to 1000
[  342.344193][T12087] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  342.848003][T12095] loop5: detected capacity change from 0 to 512
[  342.870153][T12095] EXT4-fs: Ignoring removed oldalloc option
[  342.967128][T12095] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2660: Parent and EA inode have the same ino 15
[  343.093866][T12095] loop5: lost filesystem error report for type 5 error -117
[  343.100556][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  343.114478][    C0] EXT4-fs (loop5): initial error at time 2000000054: ext4_xattr_inode_iget:437
[  343.123518][    C0] EXT4-fs (loop5): last error at time 2000000054: ext4_xattr_inode_iget:437
[  343.234234][T12095] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2660: Parent and EA inode have the same ino 15
[  343.274413][T12095] loop5: lost filesystem error report for type 5 error -117
[  343.274793][T12095] EXT4-fs (loop5): 1 orphan inode deleted
[  343.335246][T12095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.443977][T12095] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2660: deleted inode referenced: 15
[  343.493905][   T28] kauditd_printk_skb: 68 callbacks suppressed
[  343.493920][   T28] audit: type=1400 audit(2000000055.123:1431): avc:  denied  { unmount } for  pid=7324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  343.529284][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.552191][   T28] audit: type=1400 audit(2000000055.173:1432): avc:  granted  { setsecparam } for  pid=12110 comm="syz.3.2666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  343.924271][   T28] audit: type=1400 audit(2000000055.343:1433): avc:  denied  { firmware_load } for  pid=12113 comm="syz.5.2664" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  345.419004][   T28] audit: type=1400 audit(2000000057.033:1434): avc:  denied  { getopt } for  pid=12120 comm="syz.1.2667" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  346.237580][T12125] lo speed is unknown, defaulting to 1000
[  346.313411][T12125] lo speed is unknown, defaulting to 1000
[  346.455660][   T28] audit: type=1400 audit(2000000058.083:1435): avc:  denied  { create } for  pid=12142 comm="syz.1.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  346.519997][   T28] audit: type=1400 audit(2000000058.143:1436): avc:  denied  { create } for  pid=12144 comm="syz.6.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  346.558624][T12142] delete_channel: no stack
[  346.565268][   T28] audit: type=1400 audit(2000000058.173:1437): avc:  denied  { bind } for  pid=12144 comm="syz.6.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  346.612702][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2675'.
[  346.661767][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2675'.
[  346.695646][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2675'.
[  346.758440][T12149] lo speed is unknown, defaulting to 1000
[  346.773155][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2675'.
[  346.834200][   T28] audit: type=1400 audit(2000000058.463:1438): avc:  denied  { bind } for  pid=12145 comm="syz.3.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  346.859374][T12149] lo speed is unknown, defaulting to 1000
[  347.112895][T12168] lo speed is unknown, defaulting to 1000
[  347.193046][T12168] lo speed is unknown, defaulting to 1000
[  347.392126][   T28] audit: type=1400 audit(2000000059.023:1439): avc:  granted  { setsecparam } for  pid=12172 comm="syz.5.2681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  347.458118][T12174] lo speed is unknown, defaulting to 1000
[  347.594745][T12174] lo speed is unknown, defaulting to 1000
[  347.716598][T12183] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2684'.
[  348.048692][   T28] audit: type=1400 audit(2000000059.673:1440): avc:  denied  { listen } for  pid=12190 comm="syz.6.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  348.092860][T12191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=12191 comm=syz.6.2689
[  350.141815][   T28] audit: type=1400 audit(2000000060.743:1441): avc:  denied  { bind } for  pid=12199 comm="syz.6.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  350.183737][   T28] audit: type=1400 audit(2000000060.743:1442): avc:  denied  { name_bind } for  pid=12199 comm="syz.6.2703" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  350.238734][T12215] lo speed is unknown, defaulting to 1000
[  350.315851][   T28] audit: type=1400 audit(2000000060.743:1443): avc:  denied  { node_bind } for  pid=12199 comm="syz.6.2703" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  350.338945][   T28] audit: type=1400 audit(2000000060.743:1444): avc:  denied  { write } for  pid=12199 comm="syz.6.2703" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  350.365651][T12220] loop6: detected capacity change from 0 to 512
[  350.373034][   T28] audit: type=1400 audit(2000000060.743:1445): avc:  denied  { connect } for  pid=12199 comm="syz.6.2703" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  350.397797][T12223] loop5: detected capacity change from 0 to 512
[  350.405966][T12220] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  350.418216][T12223] EXT4-fs: Ignoring removed oldalloc option
[  350.425718][   T28] audit: type=1400 audit(2000000060.743:1446): avc:  denied  { name_connect } for  pid=12199 comm="syz.6.2703" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  350.431595][T12220] EXT4-fs (loop6): orphan cleanup on readonly fs
[  350.462284][   T28] audit: type=1400 audit(2000000061.483:1447): avc:  denied  { setopt } for  pid=12212 comm="syz.6.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  350.462309][   T28] audit: type=1400 audit(2000000061.483:1448): avc:  denied  { write } for  pid=12212 comm="syz.6.2696" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  350.535814][T12207] loop3: detected capacity change from 0 to 1024
[  350.555450][   T28] audit: type=1400 audit(2000000062.183:1449): avc:  denied  { mounton } for  pid=12206 comm="syz.3.2692" path="/492/file1" dev="tmpfs" ino=2597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  350.651428][T12207] EXT4-fs: Ignoring removed mblk_io_submit option
[  350.660476][T12220] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2699: Block bitmap for bg 0 marked uninitialized
[  350.697343][T12223] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2710: Parent and EA inode have the same ino 15
[  350.742487][T12220] loop6: lost filesystem error report for type 5 error -117
[  350.742782][T12220] EXT4-fs (loop6): Remounting filesystem read-only
[  350.750502][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  350.750524][    C0] EXT4-fs (loop6): initial error at time 2000000062: ext4_read_block_bitmap_nowait:517
[  350.750552][    C0] EXT4-fs (loop6): last error at time 2000000062: ext4_read_block_bitmap_nowait:517
[  350.871922][T12223] loop5: lost filesystem error report for type 5 error -117
[  350.874197][T12215] lo speed is unknown, defaulting to 1000
[  350.881637][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  350.881659][    C0] EXT4-fs (loop5): initial error at time 2000000062: ext4_xattr_inode_iget:437
[  350.881677][    C0] EXT4-fs (loop5): last error at time 2000000062: ext4_xattr_inode_iget:437
[  350.924021][T12207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  350.946113][T12223] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2710: Parent and EA inode have the same ino 15
[  350.962496][T12207] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.975213][T12223] loop5: lost filesystem error report for type 5 error -117
[  350.975436][T12220] EXT4-fs (loop6): 1 orphan inode deleted
[  350.989577][T12223] EXT4-fs (loop5): 1 orphan inode deleted
[  350.997062][T12223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.026858][T12207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  351.038509][T12220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  351.119122][T12220] netlink: 212892 bytes leftover after parsing attributes in process `syz.6.2699'.
[  351.163339][   T28] audit: type=1400 audit(2000000062.793:1450): avc:  denied  { create } for  pid=12219 comm="syz.6.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  351.229508][T11513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.245372][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.247435][T12261] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2707'.
[  352.586750][T12250] lo speed is unknown, defaulting to 1000
[  352.788976][T12250] lo speed is unknown, defaulting to 1000
[  352.978716][T12269] macvtap1: entered promiscuous mode
[  352.985229][T12269] bridge0: entered promiscuous mode
[  352.993428][T12269] macvtap1: entered allmulticast mode
[  352.999860][T12269] bridge0: entered allmulticast mode
[  353.016117][T12269] bridge0: port 2(macvtap1) entered blocking state
[  353.024338][T12269] bridge0: port 2(macvtap1) entered disabled state
[  353.077452][T12269] bridge0: left allmulticast mode
[  353.083419][T12269] bridge0: left promiscuous mode
[  353.277333][T12275] netlink: 'syz.5.2715': attribute type 1 has an invalid length.
[  353.305544][T12275] 8021q: adding VLAN 0 to HW filter on device bond3
[  353.344167][T12275] bond3: (slave ip6gretap2): making interface the new active one
[  353.371794][T12275] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[  353.385526][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'.
[  353.408075][T12279] lo speed is unknown, defaulting to 1000
[  353.463778][T12275] macvlan2: entered promiscuous mode
[  353.482251][T12275] macvlan2: entered allmulticast mode
[  353.500606][T12275] bond3: entered promiscuous mode
[  353.505709][T12275] ip6gretap2: entered promiscuous mode
[  353.520606][T12275] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  353.538003][T12275] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  353.580122][T12275] bond3: left promiscuous mode
[  353.584982][T12275] ip6gretap2: left promiscuous mode
[  353.604265][T12279] lo speed is unknown, defaulting to 1000
[  353.815082][T12294] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.2721'.
[  354.978456][T12310] loop5: detected capacity change from 0 to 1024
[  355.011936][T12310] EXT4-fs: Ignoring removed nobh option
[  355.018783][T12310] EXT4-fs: Ignoring removed nomblk_io_submit option
[  355.103819][T12310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.134800][T12310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.555422][T12320] lo speed is unknown, defaulting to 1000
[  355.636108][T12320] lo speed is unknown, defaulting to 1000
[  355.791825][T12320] xt_NFQUEUE: number of total queues is 0
[  358.007384][T12339] lo speed is unknown, defaulting to 1000
[  358.062366][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'.
[  358.073699][T12340] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2731'.
[  358.187101][T12339] lo speed is unknown, defaulting to 1000
[  358.563346][   T28] kauditd_printk_skb: 76 callbacks suppressed
[  358.563359][   T28] audit: type=1400 audit(2000000070.193:1527): avc:  denied  { create } for  pid=12343 comm="syz.3.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  358.985901][   T28] audit: type=1400 audit(2000000070.553:1528): avc:  denied  { mount } for  pid=12345 comm="syz.2.2733" name="/" dev="rpc_pipefs" ino=60898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  359.158313][T12347] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  359.202664][T12347] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  359.315589][T12355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.325602][   T28] audit: type=1400 audit(2000000070.943:1529): avc:  denied  { read write } for  pid=12354 comm="syz.5.2737" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  359.410521][T12355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.418349][T12347] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8)
[  359.424857][T12347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  359.432434][   T28] audit: type=1400 audit(2000000070.943:1530): avc:  denied  { open } for  pid=12354 comm="syz.5.2737" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  359.525200][   T28] audit: type=1400 audit(2000000070.943:1531): avc:  denied  { ioctl } for  pid=12354 comm="syz.5.2737" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  359.600703][T12347] vhci_hcd vhci_hcd.0: Device attached
[  359.640766][   T28] audit: type=1400 audit(2000000071.243:1532): avc:  denied  { watch watch_reads } for  pid=12362 comm="syz.1.2739" path="/570/file0" dev="tmpfs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  359.800761][ T4963] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  359.860722][ T4963] usb 7-3: new full-speed USB device number 2 using vhci_hcd
[  359.930690][   T28] audit: type=1400 audit(2000000071.554:1533): avc:  denied  { create } for  pid=12343 comm="syz.3.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  360.204175][   T28] audit: type=1400 audit(2000000071.834:1534): avc:  denied  { listen } for  pid=12343 comm="syz.3.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  360.395194][T12357] vhci_hcd: connection reset by peer
[  360.406543][   T12] vhci_hcd vhci_hcd.3: stop threads
[  360.412041][   T12] vhci_hcd vhci_hcd.3: release socket
[  360.417579][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  360.694424][   T28] audit: type=1400 audit(2000000072.304:1535): avc:  denied  { create } for  pid=12376 comm="syz.1.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  360.864824][   T28] audit: type=1400 audit(2000000072.314:1536): avc:  denied  { ioctl } for  pid=12376 comm="syz.1.2745" path="socket:[60289]" dev="sockfs" ino=60289 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  361.197245][T12388] lo speed is unknown, defaulting to 1000
[  361.212843][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'.
[  361.305791][T12388] lo speed is unknown, defaulting to 1000
[  361.375838][T12394] netlink: 'syz.2.2749': attribute type 1 has an invalid length.
[  361.481028][T12394] 8021q: adding VLAN 0 to HW filter on device bond9
[  361.517497][T12398] macvlan3: entered promiscuous mode
[  361.526100][T12398] macvlan3: entered allmulticast mode
[  361.542475][T12398] bond9: entered promiscuous mode
[  361.596853][T12398] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  361.613514][T12398] bond9: left promiscuous mode
[  361.739081][T12394] bond9: (slave ip6gretap2): making interface the new active one
[  361.869254][T12394] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link
[  362.001878][T12407] macvlan3: entered promiscuous mode
[  362.043970][T12407] macvlan3: entered allmulticast mode
[  362.091586][T12409] 9p: Could not find request transport: tcp*por0000000004e2
[  362.096122][T12407] bond9: entered promiscuous mode
[  362.106907][T12407] ip6gretap2: entered promiscuous mode
[  362.131128][T12407] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  362.141379][T12407] bond9: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of ip6gretap2
[  362.160595][T12407] bond9: left promiscuous mode
[  362.165496][T12407] ip6gretap2: left promiscuous mode
[  362.218987][T12420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12420 comm=syz.5.2757
[  362.421697][T12424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12424 comm=syz.3.2759
[  362.568783][T12432] program syz.5.2760 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  362.641312][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.659577][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.564846][T12443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2764'.
[  363.645862][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  363.645877][   T28] audit: type=1400 audit(2000000075.274:1547): avc:  denied  { write } for  pid=12446 comm="syz.2.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  363.894858][T12453] lo speed is unknown, defaulting to 1000
[  363.932222][T12453] lo speed is unknown, defaulting to 1000
[  364.332389][T12462] loop3: detected capacity change from 0 to 512
[  364.417025][T12462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.608338][T12462] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.780076][   T28] audit: type=1400 audit(2000000076.364:1548): avc:  denied  { mount } for  pid=12461 comm="syz.3.2772" name="/" dev="ramfs" ino=61120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  364.910505][ T4963] usb 7-3: enqueue for inactive port 2
[  364.916088][ T4963] usb 7-3: enqueue for inactive port 2
[  365.010683][ T4963] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  365.339300][   T28] audit: type=1400 audit(2000000076.964:1549): avc:  denied  { create } for  pid=12473 comm="syz.1.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  365.632462][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.987705][   T28] audit: type=1400 audit(2000000077.604:1550): avc:  denied  { write } for  pid=12484 comm="syz.2.2781" path="socket:[61525]" dev="sockfs" ino=61525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  366.041579][T12483] syzkaller0: entered promiscuous mode
[  366.047111][T12483] syzkaller0: entered allmulticast mode
[  366.243974][T12495] loop3: detected capacity change from 0 to 1024
[  366.267314][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'.
[  366.276610][   T28] audit: type=1400 audit(2000000077.894:1551): avc:  denied  { setopt } for  pid=12490 comm="syz.2.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  366.297659][T12495] EXT4-fs: Ignoring removed bh option
[  366.531990][T12495] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  366.562493][T12495] loop3: detected capacity change from 0 to 256
[  366.763339][T12504] bond0: (slave macvlan2): Opening slave failed
[  366.790652][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'.
[  366.824979][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'.
[  366.848281][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'.
[  366.871680][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'.
[  366.893350][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'.
[  366.974172][   T28] audit: type=1400 audit(2000000078.604:1552): avc:  denied  { getopt } for  pid=12514 comm="syz.5.2789" lport=39330 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  367.000108][T12513] 8021q: adding VLAN 0 to HW filter on device bond5
[  367.026090][T12513] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  367.036874][T12513] bond5: (slave macvlan2): Enslaving as an active interface with a down link
[  367.059316][   T28] audit: type=1400 audit(2000000078.604:1553): avc:  denied  { getattr } for  pid=12514 comm="syz.5.2789" lport=39330 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  367.806898][T12512] lo speed is unknown, defaulting to 1000
[  367.871914][T12512] lo speed is unknown, defaulting to 1000
[  367.996395][T12532] lo speed is unknown, defaulting to 1000
[  368.091565][T12532] lo speed is unknown, defaulting to 1000
[  368.699201][T12532] ip6gretap0: entered allmulticast mode
[  368.826166][T12539] loop5: detected capacity change from 0 to 1024
[  368.843583][T12539] EXT4-fs: Ignoring removed bh option
[  369.011957][T12539] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  369.058352][T12539] loop5: detected capacity change from 0 to 256
[  369.424021][   T28] audit: type=1400 audit(2000000081.054:1554): avc:  denied  { connect } for  pid=12552 comm="syz.5.2801" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  369.595832][   T28] audit: type=1400 audit(2000000081.224:1555): avc:  denied  { mounton } for  pid=12561 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  369.643496][T12560] loop5: detected capacity change from 0 to 512
[  369.652618][T12560] EXT4-fs warning (device loop5): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  369.840918][T12566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2803'.
[  369.897740][  T115] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.978846][T12561] lo speed is unknown, defaulting to 1000
[  370.061046][  T115] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.094186][T12561] lo speed is unknown, defaulting to 1000
[  370.146938][  T115] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.280174][T12561] chnl_net:caif_netlink_parms(): no params data found
[  370.293215][  T115] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.360584][   T28] audit: type=1400 audit(2000000081.984:1556): avc:  denied  { read } for  pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  370.448111][T12561] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.474021][T12561] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.502395][T12561] bridge_slave_0: entered allmulticast mode
[  370.525588][T12561] bridge_slave_0: entered promiscuous mode
[  370.585497][   T28] audit: type=1400 audit(2000000082.214:1557): avc:  denied  { search } for  pid=3039 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  370.624637][T12561] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.697314][T12561] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.736969][   T28] audit: type=1400 audit(2000000082.244:1558): avc:  denied  { search } for  pid=3039 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  370.752432][T12561] bridge_slave_1: entered allmulticast mode
[  370.758919][   T28] audit: type=1400 audit(2000000082.244:1559): avc:  denied  { search } for  pid=3039 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  370.786467][   T28] audit: type=1400 audit(2000000082.244:1560): avc:  denied  { read } for  pid=3039 comm="dhcpcd" name="n30" dev="tmpfs" ino=8858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  370.808590][   T28] audit: type=1400 audit(2000000082.244:1561): avc:  denied  { open } for  pid=3039 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=8858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  370.815561][T12561] bridge_slave_1: entered promiscuous mode
[  370.865066][  T115] bridge_slave_1: left allmulticast mode
[  370.867322][   T28] audit: type=1400 audit(2000000082.244:1562): avc:  denied  { getattr } for  pid=3039 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=8858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  370.871765][  T115] bridge_slave_1: left promiscuous mode
[  370.902419][  T115] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.914410][  T115] bridge_slave_0: left allmulticast mode
[  370.921431][  T115] bridge_slave_0: left promiscuous mode
[  370.930857][  T115] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.040578][  T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.051806][  T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.101238][  T115] bond0 (unregistering): Released all slaves
[  371.151060][T12561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.179384][T12561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.180248][   T28] audit: type=1400 audit(2000000082.804:1563): avc:  denied  { read open } for  pid=12608 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  371.290893][T12561] team0: Port device team_slave_0 added
[  371.322814][T12561] team0: Port device team_slave_1 added
[  371.350716][  T115] hsr_slave_0: left promiscuous mode
[  371.357841][  T115] hsr_slave_1: left promiscuous mode
[  371.376834][  T115] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.396534][  T115] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.410753][  T115] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.424090][  T115] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.452320][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2815'.
[  371.462152][  T115] veth1_macvtap: left promiscuous mode
[  371.467663][  T115] veth0_macvtap: left promiscuous mode
[  371.479173][  T115] veth1_vlan: left promiscuous mode
[  371.490178][  T115] veth0_vlan: left promiscuous mode
[  371.650316][  T115] team0 (unregistering): Port device team_slave_1 removed
[  371.665508][  T115] team0 (unregistering): Port device team_slave_0 removed
[  371.705799][T12605] lo speed is unknown, defaulting to 1000
[  371.740609][T12561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.747637][T12561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.837881][T12561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.886272][T12605] lo speed is unknown, defaulting to 1000
[  371.886614][T12561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.902460][T12561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.930100][T12561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.420678][T12637] lo: Caught tx_queue_len zero misconfig
[  372.500080][T12561] hsr_slave_0: entered promiscuous mode
[  372.506201][T12561] hsr_slave_1: entered promiscuous mode
[  372.512212][T12561] debugfs: 'hsr0' already exists in 'hsr'
[  372.525350][T12561] Cannot create hsr debugfs directory
[  372.745745][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'.
[  372.982654][T12561] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  373.125992][T12561] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  373.185710][T12561] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  373.241447][T12561] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  373.536027][T12561] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.562286][T12561] 8021q: adding VLAN 0 to HW filter on device team0
[  373.590221][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.597306][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.615834][T12692] loop5: detected capacity change from 0 to 8192
[  373.834939][T12692] program syz.5.2826 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  373.884500][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.891606][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.132585][T12561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.922077][T12561] veth0_vlan: entered promiscuous mode
[  374.951236][T12742] lo speed is unknown, defaulting to 1000
[  374.953478][T12561] veth1_vlan: entered promiscuous mode
[  374.993886][T12561] veth0_macvtap: entered promiscuous mode
[  375.053143][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  375.053160][   T28] audit: type=1400 audit(2000000086.684:1578): avc:  denied  { read } for  pid=12745 comm="syz.5.2829" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  375.089890][T12561] veth1_macvtap: entered promiscuous mode
[  375.111403][T12561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.121417][T12561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.173592][   T28] audit: type=1400 audit(2000000086.724:1579): avc:  denied  { open } for  pid=12745 comm="syz.5.2829" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  375.200214][T12748] loop5: detected capacity change from 0 to 128
[  375.229134][ T4711] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.274848][ T4711] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.301458][ T4711] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.370789][T12742] lo speed is unknown, defaulting to 1000
[  375.384939][   T28] audit: type=1400 audit(2000000087.014:1580): avc:  denied  { mounton } for  pid=12561 comm="syz-executor" path="/root/syzkaller.MjQPhm/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  375.389842][ T4711] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.489823][   T28] audit: type=1400 audit(2000000087.014:1581): avc:  denied  { mount } for  pid=12561 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  375.538049][   T28] audit: type=1400 audit(2000000087.014:1582): avc:  denied  { mount } for  pid=12561 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  375.631433][T12750] lo speed is unknown, defaulting to 1000
[  375.648852][   T28] audit: type=1400 audit(2000000087.014:1583): avc:  denied  { mounton } for  pid=12561 comm="syz-executor" path="/root/syzkaller.MjQPhm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  375.771969][   T28] audit: type=1400 audit(2000000087.014:1584): avc:  denied  { mounton } for  pid=12561 comm="syz-executor" path="/root/syzkaller.MjQPhm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=62861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  375.899905][   T28] audit: type=1400 audit(2000000087.274:1585): avc:  denied  { mounton } for  pid=12561 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  375.943601][T12750] lo speed is unknown, defaulting to 1000
[  375.952236][   T28] audit: type=1400 audit(2000000087.274:1586): avc:  denied  { mount } for  pid=12561 comm="syz-executor" name="/" dev="gadgetfs" ino=4824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  376.124674][T12759] loop5: detected capacity change from 0 to 32768
[  376.143076][T12767] loop3: detected capacity change from 0 to 512
[  376.149878][T12767] EXT4-fs: Ignoring removed oldalloc option
[  376.191912][T12763] loop7: detected capacity change from 0 to 512
[  376.207392][T12763] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  376.268135][T12767] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2833: Parent and EA inode have the same ino 15
[  376.288290][T12763] EXT4-fs (loop7): 1 truncate cleaned up
[  376.298788][T12767] loop3: lost filesystem error report for type 5 error -117
[  376.300729][T12767] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2833: Parent and EA inode have the same ino 15
[  376.320266][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  376.320288][    C0] EXT4-fs (loop3): initial error at time 2000000343: ext4_xattr_inode_iget:437
[  376.320308][    C0] EXT4-fs (loop3): last error at time 2000000343: ext4_xattr_inode_iget:437
[  376.370107][T12767] loop3: lost filesystem error report for type 5 error -117
[  376.395242][T12767] EXT4-fs (loop3): 1 orphan inode deleted
[  376.426870][T12772] netlink: 4596 bytes leftover after parsing attributes in process `syz.2.2835'.
[  376.450952][T12767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.477108][T12763] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.515507][   T28] audit: type=1400 audit(2000000344.140:1587): avc:  denied  { add_name } for  pid=12762 comm="syz.7.2832" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  376.560577][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.985373][T12785] loop5: detected capacity change from 0 to 512
[  376.994083][T12785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  377.013385][T12561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.024271][T12785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  377.033570][T12785] System zones: 1-2, 4-12, 8-8
[  377.095855][T12785] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2840: iget: bad i_size value: 38620345925642
[  377.133150][T12785] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  377.133502][T12785] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2840: couldn't read orphan inode 15 (err -117)
[  377.142727][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  377.142742][    C1] EXT4-fs (loop5): initial error at time 2000000344: ext4_orphan_get:1391: inode 15
[  377.142766][    C1] EXT4-fs (loop5): last error at time 2000000344: ext4_orphan_get:1391: inode 15
[  377.200546][T12785] loop5: lost filesystem error report for type 5 error -117
[  377.201285][T12785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.224551][T12788] loop7: detected capacity change from 0 to 8192
[  377.235548][T12788] program syz.7.2841 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  377.968940][T12769] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  378.010399][T12784] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 6464 with max blocks 64 with error 28
[  378.023574][T12784] EXT4-fs (loop5): This should not happen!! Data will be lost
[  378.023574][T12784] 
[  378.034553][T12784] EXT4-fs (loop5): Total free blocks count 0
[  378.041590][T12784] EXT4-fs (loop5): Free/Dirty block details
[  378.047491][T12784] EXT4-fs (loop5): free_blocks=0
[  378.053517][T12784] EXT4-fs (loop5): dirty_blocks=64
[  378.059743][T12784] EXT4-fs (loop5): Block reservation details
[  378.065723][T12784] EXT4-fs (loop5): i_reserved_data_blocks=64
[  378.135588][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.251716][T12809] loop7: detected capacity change from 0 to 128
[  380.177071][T12852] Cannot find del_set index 4 as target
[  380.194438][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  380.194450][   T28] audit: type=1400 audit(2000000347.820:1595): avc:  denied  { remount } for  pid=12845 comm="syz.5.2865" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  380.320432][T12854] loop7: detected capacity change from 0 to 128
[  380.405761][   T28] audit: type=1400 audit(2000000347.860:1596): avc:  denied  { append } for  pid=12853 comm="syz.7.2857" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  380.714490][T12860] usb usb1: usbfs: process 12860 (syz.7.2857) did not claim interface 0 before use
[  380.842833][   T28] audit: type=1400 audit(2000000348.470:1597): avc:  denied  { unmount } for  pid=7324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  380.873022][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.933151][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.952336][T12865] netlink: 'syz.5.2859': attribute type 13 has an invalid length.
[  381.083884][ T6695] kworker/u8:21: attempt to access beyond end of device
[  381.083884][ T6695] loop7: rw=1, sector=145, nr_sectors = 360 limit=128
[  381.290550][T12883] lo speed is unknown, defaulting to 1000
[  381.467780][T12883] lo speed is unknown, defaulting to 1000
[  382.298036][T12908] loop7: detected capacity change from 0 to 512
[  382.309445][T12908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  382.321591][T12908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  382.330298][T12908] System zones: 1-2, 4-12, 8-8
[  382.335636][T12908] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2867: iget: bad i_size value: 38620345925642
[  382.358135][T12908] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  382.358326][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  382.373812][T12908] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2867: couldn't read orphan inode 15 (err -117)
[  382.373884][    C1] EXT4-fs (loop7): initial error at time 2000000349: ext4_orphan_get:1391: inode 15
[  382.386008][T12908] loop7: lost filesystem error report for type 5 error -117
[  382.395047][    C1] EXT4-fs (loop7): last error at time 2000000349: ext4_orphan_get:1391: inode 15
[  382.413765][T12908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.578406][   T28] audit: type=1400 audit(2000000350.180:1598): avc:  denied  { mount } for  pid=12913 comm="syz.2.2871" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  383.636874][T12907] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2867: bg 0: block 5: invalid block bitmap
[  384.143102][T12907] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 9088 with max blocks 64 with error 28
[  384.157044][T12907] EXT4-fs (loop7): This should not happen!! Data will be lost
[  384.157044][T12907] 
[  384.167874][T12907] EXT4-fs (loop7): Total free blocks count 0
[  384.175003][T12907] EXT4-fs (loop7): Free/Dirty block details
[  384.180962][T12907] EXT4-fs (loop7): free_blocks=0
[  384.185913][T12907] EXT4-fs (loop7): dirty_blocks=64
[  384.191118][T12907] EXT4-fs (loop7): Block reservation details
[  384.197170][T12907] EXT4-fs (loop7): i_reserved_data_blocks=64
[  384.259237][T12561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.543843][T12932] netlink: 'syz.3.2874': attribute type 1 has an invalid length.
[  384.566873][T12932] 8021q: adding VLAN 0 to HW filter on device bond6
[  384.587330][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2885'.
[  384.625277][T12932] macvlan2: entered promiscuous mode
[  384.647353][T12932] macvlan2: entered allmulticast mode
[  384.681413][T12932] bond6: entered promiscuous mode
[  384.686778][T12932] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  384.715382][T12932] bond6: left promiscuous mode
[  384.743095][T12935] macvlan2: entered promiscuous mode
[  384.753733][T12935] macvlan2: entered allmulticast mode
[  384.759881][T12935] bond6: entered promiscuous mode
[  384.766567][T12935] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  384.807943][T12935] bond6: left promiscuous mode
[  384.980934][T12948] lo speed is unknown, defaulting to 1000
[  385.119271][T12948] lo speed is unknown, defaulting to 1000
[  386.047175][T12961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.586670][T12961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.861918][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'.
[  386.965009][T13005] loop5: detected capacity change from 0 to 256
[  387.018479][T13005] FAT-fs (loop5): Directory bread(block 64) failed
[  387.025173][T13005] FAT-fs (loop5): Directory bread(block 65) failed
[  387.031906][T13005] FAT-fs (loop5): Directory bread(block 66) failed
[  387.038449][T13005] FAT-fs (loop5): Directory bread(block 67) failed
[  387.045030][T13005] FAT-fs (loop5): Directory bread(block 68) failed
[  387.051763][T13005] FAT-fs (loop5): Directory bread(block 69) failed
[  387.058321][T13005] FAT-fs (loop5): Directory bread(block 70) failed
[  387.064853][T13005] FAT-fs (loop5): Directory bread(block 71) failed
[  387.071696][T13005] FAT-fs (loop5): Directory bread(block 72) failed
[  387.078285][T13005] FAT-fs (loop5): Directory bread(block 73) failed
[  387.352137][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2893'.
[  388.156377][T12986] loop3: detected capacity change from 0 to 8192
[  388.303857][T12986] program syz.3.2887 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  389.186221][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'.
[  389.211254][T13058] lo speed is unknown, defaulting to 1000
[  389.253625][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.264385][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.342406][T13058] lo speed is unknown, defaulting to 1000
[  389.517528][T13069] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2899'.
[  389.530589][T13069] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2899'.
[  389.541161][T13069] 0猉功D龌: renamed from gretap0
[  389.549681][T13069] 0猉功D龌: entered allmulticast mode
[  390.046251][T13074] netlink: 'syz.5.2906': attribute type 21 has an invalid length.
[  390.057377][T13074] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2906'.
[  390.070330][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2906'.
[  390.511838][T13081] syzkaller0: entered promiscuous mode
[  390.531319][T13081] syzkaller0: entered allmulticast mode
[  390.799500][T13088] loop7: detected capacity change from 0 to 256
[  390.825191][T13088] FAT-fs (loop7): Directory bread(block 64) failed
[  390.831938][T13088] FAT-fs (loop7): Directory bread(block 65) failed
[  390.838602][T13088] FAT-fs (loop7): Directory bread(block 66) failed
[  390.845193][T13088] FAT-fs (loop7): Directory bread(block 67) failed
[  390.851853][T13088] FAT-fs (loop7): Directory bread(block 68) failed
[  390.858395][T13088] FAT-fs (loop7): Directory bread(block 69) failed
[  390.865017][T13088] FAT-fs (loop7): Directory bread(block 70) failed
[  390.871605][T13088] FAT-fs (loop7): Directory bread(block 71) failed
[  390.878187][T13088] FAT-fs (loop7): Directory bread(block 72) failed
[  390.884726][T13088] FAT-fs (loop7): Directory bread(block 73) failed
[  391.561530][   T28] audit: type=1400 audit(2000000359.191:1599): avc:  denied  { setopt } for  pid=13086 comm="syz.3.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  391.662027][   T28] audit: type=1400 audit(2000000359.291:1600): avc:  denied  { bind } for  pid=13086 comm="syz.3.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  391.752284][T13092] loop5: detected capacity change from 0 to 8192
[  392.338400][   T28] audit: type=1400 audit(2000000359.961:1601): avc:  denied  { nlmsg_write } for  pid=13091 comm="syz.5.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  392.403374][   T28] audit: type=1400 audit(2000000360.011:1602): avc:  denied  { mount } for  pid=13091 comm="syz.5.2910" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  392.694966][T13089] loop3: detected capacity change from 0 to 128
[  392.949641][   T28] audit: type=1400 audit(2000000360.581:1603): avc:  denied  { write } for  pid=13114 comm="syz.2.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  393.200597][T13124] loop3: detected capacity change from 0 to 512
[  393.308908][   T28] audit: type=1400 audit(2000000360.911:1604): avc:  denied  { mount } for  pid=13120 comm="syz.2.2919" name="/" dev="configfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  393.358973][T13124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  393.406806][T13124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  393.415553][T13124] System zones: 1-2, 4-12, 8-8
[  393.424539][T13124] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2920: iget: bad i_size value: 38620345925642
[  393.438956][T13124] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  393.439296][T13124] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2920: couldn't read orphan inode 15 (err -117)
[  393.448510][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  393.448539][    C1] EXT4-fs (loop3): initial error at time 2000000361: ext4_orphan_get:1391: inode 15
[  393.448572][    C1] EXT4-fs (loop3): last error at time 2000000361: ext4_orphan_get:1391: inode 15
[  393.557132][T13124] loop3: lost filesystem error report for type 5 error -117
[  393.559453][T13124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.359259][T13123] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2920: bg 0: block 5: invalid block bitmap
[  394.373974][T13123] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 6208 with max blocks 64 with error 28
[  394.386552][T13123] EXT4-fs (loop3): This should not happen!! Data will be lost
[  394.386552][T13123] 
[  394.396223][T13123] EXT4-fs (loop3): Total free blocks count 0
[  394.402224][T13123] EXT4-fs (loop3): Free/Dirty block details
[  394.408203][T13123] EXT4-fs (loop3): free_blocks=0
[  394.413170][T13123] EXT4-fs (loop3): dirty_blocks=64
[  394.418329][T13123] EXT4-fs (loop3): Block reservation details
[  394.424313][T13123] EXT4-fs (loop3): i_reserved_data_blocks=64
[  394.580129][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.662474][T13141] loop5: detected capacity change from 0 to 256
[  394.792093][T13141] FAT-fs (loop5): Directory bread(block 64) failed
[  394.799861][T13141] FAT-fs (loop5): Directory bread(block 65) failed
[  394.806766][T13141] FAT-fs (loop5): Directory bread(block 66) failed
[  394.814510][T13141] FAT-fs (loop5): Directory bread(block 67) failed
[  394.822159][T13141] FAT-fs (loop5): Directory bread(block 68) failed
[  394.829842][T13141] FAT-fs (loop5): Directory bread(block 69) failed
[  394.836415][T13141] FAT-fs (loop5): Directory bread(block 70) failed
[  394.844128][T13141] FAT-fs (loop5): Directory bread(block 71) failed
[  394.851810][T13141] FAT-fs (loop5): Directory bread(block 72) failed
[  394.859508][T13141] FAT-fs (loop5): Directory bread(block 73) failed
[  396.115076][T13151] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2925'.
[  396.124079][T13151] gretap0: entered promiscuous mode
[  396.130063][T13151] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2925'.
[  396.139402][T13151] 0猉功D龌: renamed from gretap0
[  396.158617][T13151] 0猉功D龌: left promiscuous mode
[  396.163786][T13151] 0猉功D龌: entered allmulticast mode
[  396.564174][   T28] audit: type=1400 audit(2000000364.191:1605): avc:  denied  { read write } for  pid=13156 comm="syz.3.2924" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  396.622067][   T28] audit: type=1400 audit(2000000364.191:1606): avc:  denied  { open } for  pid=13156 comm="syz.3.2924" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  396.689578][T13132] loop7: detected capacity change from 0 to 2048
[  396.693431][T13157] loop3: detected capacity change from 0 to 512
[  396.747034][T13157] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  396.776948][T13157] EXT4-fs (loop3): 1 truncate cleaned up
[  396.845823][T13132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.892472][   T28] audit: type=1400 audit(2000000364.521:1607): avc:  denied  { append } for  pid=13131 comm="syz.7.2931" path="/18/file0/hugetlb.2MB.usage_in_bytes" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  396.925116][T13157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.974370][T12561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.450638][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.754015][T13183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2930'.
[  397.765841][   T28] audit: type=1400 audit(2000000365.381:1608): avc:  denied  { nlmsg_read } for  pid=13174 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  398.181951][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.193232][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.218618][T13188] lo speed is unknown, defaulting to 1000
[  398.261260][T13188] lo speed is unknown, defaulting to 1000
[  399.728363][   T28] audit: type=1400 audit(2000000367.351:1609): avc:  denied  { bind } for  pid=13208 comm="syz.3.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  399.781410][   T28] audit: type=1400 audit(2000000367.351:1610): avc:  denied  { setopt } for  pid=13208 comm="syz.3.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  399.874341][T13206] bridge0: entered promiscuous mode
[  399.893113][   T28] audit: type=1400 audit(2000000367.511:1611): avc:  denied  { setopt } for  pid=13218 comm="syz.1.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  399.912608][T13206] macvtap1: entered promiscuous mode
[  399.915167][T13206] macvtap1: entered allmulticast mode
[  399.956274][   T28] audit: type=1400 audit(2000000367.581:1612): avc:  denied  { create } for  pid=13224 comm="syz.3.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  399.977062][T13206] bridge0: entered allmulticast mode
[  400.067773][ T6695] Bluetooth: hci0: Frame reassembly failed (-84)
[  400.196558][T13206] bridge0: port 3(macvtap1) entered blocking state
[  400.205920][T13206] bridge0: port 3(macvtap1) entered disabled state
[  400.273533][T13230] xt_NFQUEUE: number of total queues is 0
[  400.451883][T13225] netlink: 4596 bytes leftover after parsing attributes in process `syz.3.2948'.
[  400.464866][T13206] bridge0: left allmulticast mode
[  400.475417][T13206] bridge0: left promiscuous mode
[  400.505469][T13219] tipc: Failed to obtain node identity
[  400.511216][T13219] tipc: Enabling of bearer <ib:wg1> rejected, failed to enable media
[  400.535417][T13228] lo speed is unknown, defaulting to 1000
[  400.612435][T13228] lo speed is unknown, defaulting to 1000
[  401.229819][T13236] loop7: detected capacity change from 0 to 512
[  401.678139][T13236] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2949: bg 0: block 5: invalid block bitmap
[  401.691690][T13236] loop7: lost filesystem error report for type 5 error -117
[  401.692636][T13236] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  401.700008][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  401.700022][    C1] EXT4-fs (loop7): initial error at time 2000000369: ext4_validate_block_bitmap:432
[  401.700043][    C1] EXT4-fs (loop7): last error at time 2000000369: ext4_validate_block_bitmap:432
[  401.738967][T13236] loop7: lost filesystem error report for type 5 error -117
[  401.740239][T13236] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2949: invalid indirect mapped block 3 (level 2)
[  401.763037][T13236] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  401.763733][T13236] EXT4-fs (loop7): 1 orphan inode deleted
[  401.780922][T13236] EXT4-fs (loop7): 1 truncate cleaned up
[  401.786885][T13236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.064956][ T7006] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  402.077921][T12561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.094546][T13243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.104869][T13243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.123853][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.140395][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.455954][T13249] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2951'.
[  402.514081][T13250] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.2951'.
[  403.021752][T13249] gretap0: entered promiscuous mode
[  403.029416][T13250] 0猉功D龌: renamed from gretap0
[  403.042884][T13250] 0猉功D龌: left promiscuous mode
[  403.048231][T13250] 0猉功D龌: entered allmulticast mode
[  403.172470][T13256] netlink: 'syz.1.2953': attribute type 1 has an invalid length.
[  403.189321][T13253] syzkaller0: entered promiscuous mode
[  403.195105][   T28] audit: type=1400 audit(2000000370.821:1613): avc:  denied  { ioctl } for  pid=13251 comm="syz.1.2953" path="socket:[64075]" dev="sockfs" ino=64075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  403.212982][T13256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13256 comm=syz.1.2953
[  403.227562][T13253] syzkaller0: entered allmulticast mode
[  403.311976][   T28] audit: type=1400 audit(2000000370.941:1614): avc:  denied  { read } for  pid=13262 comm="syz.1.2956" path="socket:[64088]" dev="sockfs" ino=64088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  403.336216][   T28] audit: type=1400 audit(2000000370.941:1615): avc:  denied  { mount } for  pid=13264 comm="syz.2.2957" name="/" dev="autofs" ino=64091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  403.386806][   T28] audit: type=1400 audit(2000000371.011:1616): avc:  denied  { setopt } for  pid=13264 comm="syz.2.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  403.474477][   T28] audit: type=1326 audit(2000000371.101:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  403.511877][   T28] audit: type=1326 audit(2000000371.141:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  403.538101][   T28] audit: type=1326 audit(2000000371.171:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  403.562118][   T28] audit: type=1326 audit(2000000371.171:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  403.586840][   T28] audit: type=1326 audit(2000000371.171:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  403.614116][   T28] audit: type=1326 audit(2000000371.211:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13270 comm="syz.3.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01b968bf79 code=0x7ffc0000
[  404.302293][T13283] lo speed is unknown, defaulting to 1000
[  404.921396][T13283] lo speed is unknown, defaulting to 1000
[  405.276130][T13296] loop3: detected capacity change from 0 to 512
[  405.338338][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2973'.
[  405.357077][T13308] netlink: 'syz.5.2973': attribute type 7 has an invalid length.
[  405.377044][T13308] netlink: 'syz.5.2973': attribute type 8 has an invalid length.
[  405.384781][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2973'.
[  405.465534][T13296] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  405.507691][T13296] EXT4-fs (loop3): 1 truncate cleaned up
[  405.540361][T13296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.632390][T13318] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2976'.
[  405.942168][T13324] loop5: detected capacity change from 0 to 512
[  406.318965][T13324] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2977: bg 0: block 5: invalid block bitmap
[  406.332369][T13324] loop5: lost filesystem error report for type 5 error -117
[  406.332849][T13324] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  406.340175][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  406.340193][    C1] EXT4-fs (loop5): initial error at time 2000000629: ext4_validate_block_bitmap:432
[  406.340255][    C1] EXT4-fs (loop5): last error at time 2000000629: ext4_validate_block_bitmap:432
[  406.379585][T13324] loop5: lost filesystem error report for type 5 error -117
[  406.379859][T13324] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2977: invalid indirect mapped block 3 (level 2)
[  406.402707][T13324] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  406.404119][T13324] EXT4-fs (loop5): 1 orphan inode deleted
[  406.421380][T13324] EXT4-fs (loop5): 1 truncate cleaned up
[  406.428584][T13324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.629910][T13333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2980'.
[  406.714423][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.861878][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.469033][T13352] loop3: detected capacity change from 0 to 8192
[  408.145242][T13371] lo speed is unknown, defaulting to 1000
[  408.182224][T13371] lo speed is unknown, defaulting to 1000
[  408.241067][T13371] xt_NFQUEUE: number of total queues is 0
[  408.705671][T13373] kthread_run failed with err -4
[  408.793445][   T28] kauditd_printk_skb: 51 callbacks suppressed
[  408.793464][   T28] audit: type=1400 audit(2000000632.397:1674): avc:  denied  { create } for  pid=13375 comm="syz.3.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  408.848073][   T28] audit: type=1400 audit(2000000632.397:1675): avc:  denied  { bind } for  pid=13375 comm="syz.3.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  409.022037][T13380] loop5: detected capacity change from 0 to 512
[  409.085256][T13381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2991'.
[  409.097364][T13380] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  409.146739][T13380] EXT4-fs (loop5): 1 truncate cleaned up
[  409.183487][T13380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.289843][   T28] audit: type=1400 audit(2000000632.927:1676): avc:  denied  { ioctl } for  pid=13379 comm="syz.5.2994" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  409.357922][   T28] audit: type=1400 audit(2000000632.987:1677): avc:  denied  { write } for  pid=13375 comm="syz.3.2991" path="socket:[64267]" dev="sockfs" ino=64267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  409.762912][T13394] lo speed is unknown, defaulting to 1000
[  409.804179][T13394] lo speed is unknown, defaulting to 1000
[  409.886201][ T7324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.114936][T13405] loop5: detected capacity change from 0 to 128
[  410.924386][T13400] loop3: detected capacity change from 0 to 512
[  410.934485][T13400] EXT4-fs: Ignoring removed nobh option
[  411.170825][T13400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.221729][   T28] audit: type=1400 audit(2000000634.857:1678): avc:  denied  { ioctl } for  pid=13424 comm="syz.1.3006" path="socket:[65207]" dev="sockfs" ino=65207 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  411.248227][T13400] ext4 filesystem being mounted at /549/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  412.424661][T13426] loop7: detected capacity change from 0 to 256
[  412.488095][T13426] FAT-fs (loop7): Directory bread(block 64) failed
[  412.511940][T13426] FAT-fs (loop7): Directory bread(block 65) failed
[  412.536551][T13426] FAT-fs (loop7): Directory bread(block 66) failed
[  412.562948][T13426] FAT-fs (loop7): Directory bread(block 67) failed
[  412.571838][T13426] FAT-fs (loop7): Directory bread(block 68) failed
[  412.623015][T13426] FAT-fs (loop7): Directory bread(block 69) failed
[  412.646099][T13426] FAT-fs (loop7): Directory bread(block 70) failed
[  412.671763][T13426] FAT-fs (loop7): Directory bread(block 71) failed
[  412.679773][T13426] FAT-fs (loop7): Directory bread(block 72) failed
[  412.700460][T13426] FAT-fs (loop7): Directory bread(block 73) failed
[  413.151749][   T28] audit: type=1400 audit(2000000636.747:1679): avc:  denied  { read } for  pid=13427 comm="syz.1.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  413.503800][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.846404][T13445] bridge0: entered promiscuous mode
[  413.944307][T13445] macvtap1: entered promiscuous mode
[  413.953619][T13445] macvtap1: entered allmulticast mode
[  413.959194][T13445] bridge0: entered allmulticast mode
[  413.972736][T13445] bridge0: port 4(macvtap1) entered blocking state
[  413.982363][T13445] bridge0: port 4(macvtap1) entered disabled state
[  414.030708][T13445] bridge0: left allmulticast mode
[  414.039443][T13445] bridge0: left promiscuous mode
[  414.841240][   T28] audit: type=1400 audit(2000000638.468:1680): avc:  denied  { wake_alarm } for  pid=13461 comm="syz.5.3019" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  415.199566][   T28] audit: type=1400 audit(2000000894.832:1681): avc:  denied  { write } for  pid=13498 comm="syz.5.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  415.265180][   T28] audit: type=1400 audit(2000000894.892:1682): avc:  denied  { bind } for  pid=13503 comm="syz.5.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  415.267718][   T28] audit: type=1400 audit(2000000894.902:1683): avc:  denied  { name_bind } for  pid=13503 comm="syz.5.3027" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  415.288748][   T28] audit: type=1400 audit(2000000894.902:1684): avc:  denied  { node_bind } for  pid=13503 comm="syz.5.3027" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  415.478572][T13509] bridge0: entered promiscuous mode
[  415.478680][T13509] macvtap1: entered promiscuous mode
[  415.478747][T13509] macvtap1: entered allmulticast mode
[  415.478770][T13509] bridge0: entered allmulticast mode
[  415.479318][T13509] bridge0: port 4(macvtap1) entered blocking state
[  415.479349][T13509] bridge0: port 4(macvtap1) entered disabled state
[  415.521722][T13509] bridge0: left allmulticast mode
[  415.521793][T13509] bridge0: left promiscuous mode
[  415.525466][T13504] 8021q: VLANs not supported on gre0
[  415.822621][T13493] loop7: detected capacity change from 0 to 512
[  415.948898][T13493] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3023: couldn't read orphan inode 26 (err -116)
[  416.207701][T13493] loop7: lost filesystem error report for type 5 error -116
[  416.217563][T13493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.218222][T13493] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  416.253231][T13493] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3023: bg 0: block 64: padding at end of block bitmap is not set
[  416.302567][T13493] Quota error (device loop7): write_blk: dquota write failed
[  416.302726][T13493] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  416.302846][T13493] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.3023: Failed to acquire dquot type 0
[  416.303774][T13527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3031'.
[  416.343248][   T28] audit: type=1400 audit(2000000895.972:1685): avc:  denied  { create } for  pid=13528 comm="syz.1.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  416.435621][T12561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.532438][   T28] audit: type=1400 audit(2000000896.162:1686): avc:  denied  { setopt } for  pid=13535 comm="syz.5.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  416.637848][T13541] loop3: detected capacity change from 0 to 512
[  416.664408][T13541] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3037: bg 0: block 393: padding at end of block bitmap is not set
[  416.680197][T13541] loop3: lost filesystem error report for type 5 error -117
[  416.686400][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  416.700186][    C0] EXT4-fs (loop3): initial error at time 2000000896: ext4_validate_block_bitmap:441
[  416.709675][    C0] EXT4-fs (loop3): last error at time 2000000896: ext4_validate_block_bitmap:441
[  416.721249][   T28] audit: type=1400 audit(2000000896.342:1687): avc:  denied  { write } for  pid=13544 comm="syz.5.3038" path="socket:[65538]" dev="sockfs" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  416.776637][T13541] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  416.785482][T13541] loop3: lost filesystem error report for type 5 error -117
[  416.785977][T13541] EXT4-fs (loop3): 2 truncates cleaned up
[  416.800359][T13541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.196652][   T35] IPVS: starting estimator thread 0...
[  417.345896][T13553] IPVS: using max 2448 ests per chain, 122400 per kthread
[  418.649483][T13560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3041'.
[  418.659724][T13560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3041'.
[  419.819617][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.083819][T13578] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3049'.
[  420.093184][   T28] audit: type=1400 audit(2000000899.542:1688): avc:  denied  { ioctl } for  pid=13575 comm="syz.5.3049" path="socket:[65452]" dev="sockfs" ino=65452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  420.865026][T13591] loop3: detected capacity change from 0 to 512
[  421.057013][T13591] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  421.606903][   T28] audit: type=1400 audit(2000000901.242:1689): avc:  denied  { read write } for  pid=13590 comm="syz.3.3048" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  421.632816][   T28] audit: type=1400 audit(2000000901.262:1690): avc:  denied  { open } for  pid=13590 comm="syz.3.3048" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  421.882933][   T28] audit: type=1400 audit(2000000901.512:1691): avc:  denied  { shutdown } for  pid=13603 comm="syz.3.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  421.904047][   T28] audit: type=1400 audit(2000000901.532:1692): avc:  denied  { read } for  pid=13603 comm="syz.3.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  422.130582][T13609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  422.217867][   T28] audit: type=1400 audit(2000000901.852:1693): avc:  denied  { ioctl } for  pid=13608 comm="syz.7.3058" path="socket:[66565]" dev="sockfs" ino=66565 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  422.359963][   T28] audit: type=1400 audit(2000000901.992:1694): avc:  denied  { setopt } for  pid=13617 comm="syz.2.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  422.446879][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3062'.
[  422.490464][T13631] netlink: 'syz.2.3063': attribute type 1 has an invalid length.
[  422.525249][T13631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13631 comm=syz.2.3063
[  422.630965][T13621] loop3: detected capacity change from 0 to 512
[  422.893689][T13621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  422.917427][T13621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.931635][T13621] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  423.077230][   T28] audit: type=1400 audit(2000001158.670:1695): avc:  denied  { map } for  pid=13619 comm="syz.3.3060" path="/557/bus/pids.current" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  423.087522][T13647] loop7: detected capacity change from 0 to 16384
[  423.107972][   T28] audit: type=1400 audit(2000001158.710:1696): avc:  denied  { getopt } for  pid=13646 comm="syz.7.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  423.171047][T13653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2
[  423.181960][T13653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  423.192873][T13653] Buffer I/O error on dev loop7, logical block 0, async page read
[  423.751714][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.762451][T13651] 9p: Bad value for 'rfdno'
[  423.789761][T13647] loop7: detected capacity change from 16384 to 0
[  423.797428][    C0] I/O error, dev loop7, sector 16368 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  423.840765][T13663] loop3: detected capacity change from 0 to 1024
[  423.929390][T13663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.993776][T13674] netlink: 'syz.5.3076': attribute type 1 has an invalid length.
[  424.932018][   T28] audit: type=1400 audit(2000001160.180:1697): avc:  denied  { mac_admin } for  pid=13668 comm="syz.1.3074" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  425.004818][T13678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13678 comm=syz.5.3076
[  425.070801][T13688] macvtap1: entered promiscuous mode
[  425.077248][T13688] bridge0: entered promiscuous mode
[  425.083712][T13688] macvtap1: entered allmulticast mode
[  425.089849][T13688] bridge0: entered allmulticast mode
[  425.098804][T13688] bridge0: port 2(macvtap1) entered blocking state
[  425.138695][T13688] bridge0: port 2(macvtap1) entered disabled state
[  425.153249][T13688] bridge0: left allmulticast mode
[  425.162247][T13688] bridge0: left promiscuous mode
[  425.243037][T13695] netlink: 'syz.2.3082': attribute type 16 has an invalid length.
[  425.375781][T13695] netlink: 'syz.2.3082': attribute type 17 has an invalid length.
[  425.388614][T13695] 0猉功D龌: left allmulticast mode
[  425.408423][T13695] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.420160][T13695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  426.323158][T13704] loop7: detected capacity change from 0 to 128
[  426.359483][T13704] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  426.386225][T13704] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  426.457080][   T35] IPVS: starting estimator thread 0...
[  426.547284][T13709] IPVS: using max 2448 ests per chain, 122400 per kthread
[  427.675362][T13718] lo speed is unknown, defaulting to 1000
[  427.744877][T13718] lo speed is unknown, defaulting to 1000
[  428.157011][T13728] syzkaller0: entered promiscuous mode
[  428.162638][T13728] syzkaller0: entered allmulticast mode
[  428.328004][T12561] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  428.639029][ T6689] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  428.647863][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  428.647878][   T28] audit: type=1400 audit(2000001164.271:1701): avc:  denied  { bind } for  pid=13733 comm="syz.7.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  428.674435][ T6689] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  428.683279][ T6689] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  428.876200][T13734] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.935505][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.948840][T13725] kthread_run failed with err -4
[  429.155657][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'.
[  429.299523][T13755] loop5: detected capacity change from 0 to 256
[  429.778677][   T28] audit: type=1400 audit(2000001165.411:1702): avc:  denied  { read } for  pid=13764 comm="syz.3.3101" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  429.802749][   T28] audit: type=1400 audit(2000001165.431:1703): avc:  denied  { open } for  pid=13764 comm="syz.3.3101" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  430.047103][T13769] loop3: detected capacity change from 0 to 128
[  430.183757][T13773] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  430.319444][T13734] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.329982][T13734] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.419710][T13734] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.431430][T13734] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.490095][T13734] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.501221][T13734] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.554990][T13786] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  430.599566][   T28] audit: type=1400 audit(2000001166.231:1704): avc:  denied  { listen } for  pid=13790 comm="syz.2.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  430.648857][   T30] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  430.658371][   T30] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.670948][   T30] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  430.680282][   T30] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.694781][   T30] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  430.703475][   T30] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.720637][ T6689] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  430.737382][ T6689] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.938344][T13812] loop7: detected capacity change from 0 to 128
[  431.033682][   T30] ==================================================================
[  431.041808][   T30] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
[  431.051285][   T30] 
[  431.053605][   T30] write to 0xffff88814750c067 of 3 bytes by task 13819 on cpu 1:
[  431.061317][   T30]  copy_folio_from_iter_atomic+0x75f/0x1170
[  431.067221][   T30]  generic_perform_write+0x2c1/0x490
[  431.072514][   T30]  __generic_file_write_iter+0x9e/0x120
[  431.078067][   T30]  generic_file_write_iter+0x8d/0x310
[  431.083445][   T30]  iter_file_splice_write+0x6bc/0xa80
[  431.088826][   T30]  direct_splice_actor+0x156/0x2a0
[  431.093950][   T30]  splice_direct_to_actor+0x311/0x670
[  431.099333][   T30]  do_splice_direct+0x119/0x1a0
[  431.104189][   T30]  do_sendfile+0x382/0x650
[  431.108617][   T30]  __x64_sys_sendfile64+0x105/0x150
[  431.113820][   T30]  x64_sys_call+0x2dc4/0x3020
[  431.118578][   T30]  do_syscall_64+0x12c/0x370
[  431.123175][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.129068][   T30] 
[  431.131389][   T30] read to 0xffff88814750c000 of 512 bytes by task 30 on cpu 0:
[  431.138928][   T30]  copy_folio_from_iter_atomic+0x75f/0x1170
[  431.144834][   T30]  generic_perform_write+0x2c1/0x490
[  431.150121][   T30]  shmem_file_write_iter+0xc5/0xf0
[  431.155239][   T30]  lo_rw_aio+0x67d/0x730
[  431.159482][   T30]  loop_process_work+0x56c/0xac0
[  431.164420][   T30]  loop_workfn+0x31/0x40
[  431.168679][   T30]  process_scheduled_works+0x4de/0x9e0
[  431.174152][   T30]  worker_thread+0x581/0x770
[  431.178741][   T30]  kthread+0x22a/0x280
[  431.182799][   T30]  ret_from_fork+0x150/0x360
[  431.187383][   T30]  ret_from_fork_asm+0x1a/0x30
[  431.192140][   T30] 
[  431.194446][   T30] Reported by Kernel Concurrency Sanitizer on:
[  431.200584][   T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  431.211421][   T30] Tainted: [W]=WARN
[  431.215280][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  431.225324][   T30] Workqueue: loop7 loop_workfn
[  431.230116][   T30] ==================================================================
[  440.305404][ T4706] ------------[ cut here ]------------
[  440.310882][ T4706] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x247/0x530, CPU#0: kworker/u8:11/4706
[  440.321427][ T4706] Modules linked in:
[  440.325354][ T4706] CPU: 0 UID: 0 PID: 4706 Comm: kworker/u8:11 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  440.336620][ T4706] Tainted: [W]=WARN
[  440.340476][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  440.350650][ T4706] Workqueue: iou_exit io_ring_exit_work
[  440.356377][ T4706] RIP: 0010:io_ring_exit_work+0x247/0x530
[  440.362154][ T4706] Code: 23 e8 2d dd 36 00 48 8b 7c 24 10 48 8b 74 24 08 e8 ce f9 79 04 48 85 c0 75 1f e8 14 dd 36 00 e9 5e fe ff ff e8 0a dd 36 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 08 eb cd 4c 8d 74 24 40 4c 89
[  440.381879][ T4706] RSP: 0018:ffffc90001a8bcc0 EFLAGS: 00010293
[  440.387970][ T4706] RAX: ffffffff81226206 RBX: ffff88810ccb5000 RCX: ffff888105480000
[  440.396039][ T4706] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000
[  440.404166][ T4706] RBP: ffff88810ccb5308 R08: 0001c90001a8bc7f R09: 0000000000000000
[  440.412164][ T4706] R10: 0001c90001a8bc78 R11: 0001c90001a8bc7f R12: ffff88810ccb5250
[  440.420151][ T4706] R13: 0000000000002000 R14: 0000000100003664 R15: 0000000100003662
[  440.428242][ T4706] FS:  0000000000000000(0000) GS:ffff8882ae8e4000(0000) knlGS:0000000000000000
[  440.437192][ T4706] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  440.443763][ T4706] CR2: 00007f1b23242e80 CR3: 00000001069e8000 CR4: 00000000003506f0
[  440.451779][ T4706] DR0: 0000000000000000 DR1: 0000000000000003 DR2: 0000000000000000
[  440.459829][ T4706] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  440.467854][ T4706] Call Trace:
[  440.471125][ T4706]  <TASK>
[  440.474042][ T4706]  process_scheduled_works+0x4de/0x9e0
[  440.479546][ T4706]  worker_thread+0x581/0x770
[  440.484141][ T4706]  ? __pfx_worker_thread+0x10/0x10
[  440.489325][ T4706]  kthread+0x22a/0x280
[  440.493387][ T4706]  ? __pfx_kthread+0x10/0x10
[  440.497996][ T4706]  ret_from_fork+0x150/0x360
[  440.502631][ T4706]  ? __pfx_kthread+0x10/0x10
[  440.507248][ T4706]  ret_from_fork_asm+0x1a/0x30
[  440.512017][ T4706]  </TASK>
[  440.515011][ T4706] ---[ end trace 0000000000000000 ]---