last executing test programs:

21.605598406s ago: executing program 4 (id=1016):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

21.604874236s ago: executing program 4 (id=1017):
r0 = socket(0x5, 0x3, 0x0)
write(r0, &(0x7f0000000000)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x80001009, 0x108, 0x0, 'queue0\x00', 0xffff7ffc})
r2 = socket$inet6(0xa, 0x80002, 0x0)
file_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x20, 0x1, 0x4, 0x401, 0x101}, 0x18, 0x100)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000194)
r4 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8918, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x188}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000006ab, 0x3}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x71024, 0x0)
link(0x0, &(0x7f0000000740)='./file0\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r5, &(0x7f0000000880), 0x2f, 0x40012012, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000008c0)={0x200000000000001, 0x2}, 0x5f)
connect$inet6(r2, &(0x7f0000000900)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980), 0x171}}], 0x400000000000172, 0x4000000)
sendmmsg$inet(r2, &(0x7f00000009c0), 0x4000000000000e7, 0x2400c8c4)
write$sndseq(r1, &(0x7f0000000180)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

21.098757357s ago: executing program 4 (id=1025):
set_mempolicy(0x3, &(0x7f0000000180)=0xfffffffffffffff7, 0x5)
r0 = shmget$private(0x0, 0x800000, 0x800, &(0x7f0000173000/0x800000)=nil)
shmat(r0, &(0x7f0000229000/0x3000)=nil, 0xffffffffffffefff)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
lstat(0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, r2)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0xa82, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000200)={'icmp6\x00'}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

21.039648343s ago: executing program 4 (id=1026):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa, 0x6a}}, './file1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000020", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x7c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x205, 0x8401)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1, 0xfffc, 0x7895}, 0x789d, 0xbef, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000600)="d5", 0x1)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0x8}, {}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='keyA keyB 200000 000 0 \\', 0x18)

20.804332916s ago: executing program 4 (id=1030):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000c16, &(0x7f00000000c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000b40))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x8a141, 0x59)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65747073f736f36930323900"], 0xa)
pwrite64(r1, &(0x7f0000000c00)="f6", 0xffffff07, 0x8000c61)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001680)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000016c0)={r4, r3})
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x181441, 0x148)
r5 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r5, 0x80000000)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000500)={0x0, 0x0, 0xfd8b, 0x5})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2)

20.241745533s ago: executing program 4 (id=1039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000cc48", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf251f00000007002100616100000400cc00300022802c000080080007000600000008000600018000000800030008000000080002000100000008000600050000000400cc000400cc0008009a0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r1 = io_uring_setup(0x2f04, &(0x7f0000000880)={0x0, 0xc54b, 0x400, 0x20001, 0x2d6})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000440)=0x5, 0x4)
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x3b, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2, 0x2d, 0x0, 0x0, 0x5, 0x6, 0x0, @remote, @remote, {[@noop]}}, {{0x4e24, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff, 0x0, 0x6}, {'A'}}}}}}, 0x0)
kexec_load(0x2, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x20008000, 0xbfffd000}], 0xd0ffbf00000000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0xfffffc1d, 0xfa00, {0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff}, 0x106, 0x3}}, 0xfffffffffffffdaa)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, r5, 0x6}}, 0x18)
r6 = io_uring_setup(0x7623, &(0x7f00000001c0)={0x0, 0x4627, 0x800, 0xfffffffc, 0x53})
io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000240)=[r1], 0x1)

20.225408464s ago: executing program 32 (id=1039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000cc48", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf251f00000007002100616100000400cc00300022802c000080080007000600000008000600018000000800030008000000080002000100000008000600050000000400cc000400cc0008009a0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r1 = io_uring_setup(0x2f04, &(0x7f0000000880)={0x0, 0xc54b, 0x400, 0x20001, 0x2d6})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000440)=0x5, 0x4)
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x3b, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2, 0x2d, 0x0, 0x0, 0x5, 0x6, 0x0, @remote, @remote, {[@noop]}}, {{0x4e24, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff, 0x0, 0x6}, {'A'}}}}}}, 0x0)
kexec_load(0x2, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x20008000, 0xbfffd000}], 0xd0ffbf00000000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0xfffffc1d, 0xfa00, {0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff}, 0x106, 0x3}}, 0xfffffffffffffdaa)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, r5, 0x6}}, 0x18)
r6 = io_uring_setup(0x7623, &(0x7f00000001c0)={0x0, 0x4627, 0x800, 0xfffffffc, 0x53})
io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000240)=[r1], 0x1)

14.213153367s ago: executing program 2 (id=1074):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f00000001c0)=[{0x3, &(0x7f0000000200)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000002c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xde\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83u\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffyi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xdf\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000380), 0x0)
socket$inet6(0xa, 0x2, 0x0)

13.367841661s ago: executing program 2 (id=1077):
set_mempolicy(0x3, &(0x7f0000000180)=0xfffffffffffffff7, 0x5)
r0 = shmget$private(0x0, 0x800000, 0x800, &(0x7f0000173000/0x800000)=nil)
shmat(r0, &(0x7f0000229000/0x3000)=nil, 0xffffffffffffefff)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
lstat(0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
r4 = open(0x0, 0x0, 0x244)
r5 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, r5)
setpgid(0x0, r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0xa82, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'macsec0\x00'})
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$cgroup_int(r6, &(0x7f00000005c0)=0x3, 0xe)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0)

12.807696107s ago: executing program 2 (id=1084):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0})
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r1}) (fail_nth: 2)

12.68819263s ago: executing program 2 (id=1086):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$eJzs3buLXFUcB/Df3d15GMGZwkoEL5jCxpBNazOLTGBwClGmUAsNJgHZGYQEFnzgJJWtjaV/gSDY+U/YWNgHbAU7Fwxcua95ZWaSCZnEx+dTJGfPOd9zfvfunV22mDMfvTw5vZ7Gzbtf3ot2O4mDXvTiPIluHETtTizpfRMAwL/ZeZbFH1lpeSTZmstH27NJd/ZYIQDwpG3+/b/Bj3svCQDYs3ffe/+tk+Gw/06atuPq5OuzUf4nff5/OX5yMz6JcdyIy9GJ+xHZTNm+mmXZ9CjNdePiZHo2ypOTD3+u1j/5PaLIH0cnukXXcn4w7B+npYX8NK/jQrV/L89fiU68uGb/wbB/ZU0+Rs147dWF+i9FJ375OD6NcVwviijyr/81GPa/Ok7TN7Nv//zig7y8PJ9Mz0atYt5cdviUvzUAAAAAAAAAAAAAAAAAAAAAAPyHXUrTVqTFP924OMm7qvN3Du/nXzQirXWXz+cp87NTglfOB5pm8V19Ps/lNE2zauI8fxQvHcXRs7lqAAAAAAAAAAAAAAAAAAAA+Ge5/dnnp9fG4xu3nkijPg2gflv/467TW+h5JdbM6caspzXf8qDadsvKcVjPSSK2lpGvuFPxjYfvvqHx3KbU9z/seuvaD5/TeIwKd2zUT9fptWT9PWxF3dOuH5KfFuc04xH3am4aynZ6/JprhzqPGr93oXo1NZ8veqZbJkeyrbA3fitXqnqS1atoFnd1bbxRNcrXQjX0wkK8vdPz/ODPisRpHQAAAAAAAAAAAAAAAAAAsFfzN/2uGby7IfTroPyQ/+juuToAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDrmn/+/qXGePTA0rcIrkyPejtV4M27dfsaXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/A3wEAAP//EPpehQ==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa, 0x6a}}, './file1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000020", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x7c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x205, 0x8401)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1, 0xfffc, 0x7895}, 0x789d, 0xbef, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000600)="d5", 0x1)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0x8}, {}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='keyA keyB 200000 000 0 \\', 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe000001"], 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12.467929132s ago: executing program 2 (id=1090):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27fffd, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1e6, 0x100011224, 0x3, 0x5, 0x8, 0xa0005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffeffffffffffb, 0xffffffffffffffff, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./tracing\x00', &(0x7f00000002c0)='btrfs\x00', 0x80000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e:my_read_msr1 msr/read_msr', 0x1b)
creat(&(0x7f0000000340)='./sys\x00', 0x145)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6(0xa, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39d, 0x1, @perf_bp={0x0, 0x1}, 0xb4c1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$inet(0x2, 0x4, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000800)={'dummy0\x00', &(0x7f0000000840)=@ethtool_gstrings={0x1b, 0x4}})
socket(0x31, 0x5, 0xfffffefd)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
r3 = io_uring_setup(0x7272, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x82c, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='3', @ANYRESDEC], 0x5c)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r5=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="a7", 0x1, 0x5, &(0x7f0000000100)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @local}, 0x14)
setuid(0xee01)
removexattr(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)=@known='trusted.overlay.metacopy\x00')

12.271098251s ago: executing program 2 (id=1091):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './proc\x00'})
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', 0x80, 0x100)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000009c0)=@usbdevfs_driver={0x0, 0xffffffff, 0x0})
perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x29408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}]}, 0x44}}, 0x0) (fail_nth: 5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

12.270833331s ago: executing program 3 (id=1092):
socket$netlink(0x10, 0x3, 0x12)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000)
r0 = perf_event_open(&(0x7f0000001440)={0x0, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x10b0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x0, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
write(r0, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000017c0), 0x109000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001800)=0xe)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001840), 0xc1101, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000001880)=0x1)
socket$key(0xf, 0x3, 0x2)
pwritev(r2, &(0x7f0000001c00)=[{&(0x7f0000001c40)="527f577cc462044882a7783253c491bd4e606a8d0c385a2fbed3a114c0ac8bbdb9ae1ca514fb4a1c8c9eaef5b11f9a49901ffab354a0a8a29a4e3188faf755e9ffffc1aee9404fc94851472d839fb30c7b3e4b1c48597b035d18400aa1f0311d6aac1549fbef6fc8ce3394c88e830caf053b4441bc4a373d384265c0ef38f2fd831ab5b4dcefcd15eca12877a126bb7b28", 0x91}], 0x1, 0x213, 0xb)

12.201215188s ago: executing program 33 (id=1091):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './proc\x00'})
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', 0x80, 0x100)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000009c0)=@usbdevfs_driver={0x0, 0xffffffff, 0x0})
perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x29408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}]}, 0x44}}, 0x0) (fail_nth: 5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

12.09082959s ago: executing program 3 (id=1096):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000640)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff8000}]})
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0)
unshare(0x22020400)
umount2(&(0x7f0000000180)='./file0\x00', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff00000000000000000000000000000000bd370179ee08f4c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)="20e189c07136300a", 0x8)
socket$kcm(0x2, 0x3, 0x106)
r3 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
kexec_load(0x9, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f0000000740))
modify_ldt$write2(0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)

11.076292181s ago: executing program 3 (id=1098):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x5, 0x10000, 0x1, 0xffffffff, 0x0, 0x4000006}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25010000000000000009410000004c00180000000662726f6164636173742d6c696e6b00000000000000a1b0edcaedd3afca84885d00"/109], 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x240400c0)

10.852281033s ago: executing program 3 (id=1100):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa, 0x6a}}, './file1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000020", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x7c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x205, 0x8401)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1, 0xfffc, 0x7895}, 0x789d, 0xbef, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000600)="d5", 0x1)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0x8}, {}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='keyA keyB 200000 000 0 \\', 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe000001"], 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.037153745s ago: executing program 3 (id=1103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000002b4000000000000000018"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=r3, @ANYBLOB="08000b00010050b10000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="150000001400010000000000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
dup(r6)
r7 = socket$inet(0x2, 0x1, 0x6)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000018c0)=0x2, 0x4)
bind$inet(r7, &(0x7f0000001900)={0x2, 0x801, @loopback}, 0x10)
listen(r7, 0x5)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000001940)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r9)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)={0x34, r10, 0x1, 0x0, 0x0, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b80)={0xf8, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x36}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x721}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008800}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c80)='./mnt\x00', 0x1ff)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0xfc}}, @TCA_RED_STAB={0x104, 0x2, '\x00 \x00'}]}}]}, 0x148}}, 0x0)
accept$inet(r7, 0x0, 0x0)

9.751224764s ago: executing program 3 (id=1107):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x5, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b40000000000000079b0480000000000610428000000000095000000"], &(0x7f00000006c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
io_uring_setup(0x653, &(0x7f0000001200)={0x0, 0x6c6b, 0x40, 0x1, 0x3e3})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000b40)={&(0x7f0000000b80)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000bc0)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000c00)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c40)={'ip6gretap0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000c80)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000cc0)={0x2c, 0x0, r3, 0x40000000}, 0x10)
r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f00000001c0)="$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")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x20000, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000d80)={@multicast2, @loopback}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r8, &(0x7f0000000e40)=[{&(0x7f0000000e80)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000ec0)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000f00)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000f40)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000f80)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000700)=""/112, 0x70}], 0x1, 0xffffffff, 0x34)

9.724924307s ago: executing program 34 (id=1107):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x5, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b40000000000000079b0480000000000610428000000000095000000"], &(0x7f00000006c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
io_uring_setup(0x653, &(0x7f0000001200)={0x0, 0x6c6b, 0x40, 0x1, 0x3e3})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000b40)={&(0x7f0000000b80)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000bc0)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000c00)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c40)={'ip6gretap0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000c80)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000cc0)={0x2c, 0x0, r3, 0x40000000}, 0x10)
r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f00000001c0)="$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")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x20000, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000d80)={@multicast2, @loopback}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r8, &(0x7f0000000e40)=[{&(0x7f0000000e80)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000ec0)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000f00)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000f40)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000f80)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000700)=""/112, 0x70}], 0x1, 0xffffffff, 0x34)

9.49120265s ago: executing program 5 (id=1109):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000640)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff8000}]})
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0)
unshare(0x22020400)
umount2(&(0x7f0000000180)='./file0\x00', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff00000000000000000000000000000000bd370179ee08f4c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)="20e189c07136300a", 0x8)
socket$kcm(0x2, 0x3, 0x106)
r3 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
kexec_load(0x9, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f0000000740))
modify_ldt$write2(0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)

9.407347118s ago: executing program 5 (id=1110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x264d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x4, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x3000000, &(0x7f0000000340)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000540)="$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") (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r1 = syz_create_resource$futex(&(0x7f0000000000)=0x1) (async)
timer_create(0xc6831d53baafcb73, 0x0, 0x0)
futex(r1, 0x2, 0x1, 0x0, 0x0, 0x403) (async)
futex(r1, 0xc, 0x1, 0x0, 0x0, 0x1) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800100000000000000000000000000071105200000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000d00)=ANY=[], &(0x7f0000000c40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async)
getpid() (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000ac0)={0x0, 0xe, 0xffffffff, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) (async)
syz_open_pts(r2, 0x80)

9.319002657s ago: executing program 5 (id=1111):
link(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x80000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x88c0}, 0x24044044)
sendmmsg(r1, &(0x7f0000000a40), 0x40000000000009f, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x366, 0x10, &(0x7f00000013c0), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001440)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r4, &(0x7f00000014c0), &(0x7f0000001500)=@udp=r2}, 0x20)
recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)

9.168058762s ago: executing program 5 (id=1112):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa, 0x6a}}, './file1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000020", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x7c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x205, 0x8401)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1, 0xfffc, 0x7895}, 0x789d, 0xbef, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000600)="d5", 0x1)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0x8}, {}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='keyA keyB 200000 000 0 \\', 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe000001"], 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.977727911s ago: executing program 5 (id=1114):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r0 = syz_mount_image$ext4(&(0x7f0000000d00)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f00000001c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x39, 0x32, 0x66, 0x9, 0x0, 0x61, 0x61], 0x2d, [0x0, 0x31, 0x37, 0x31], 0x2d, [0x30, 0x53, 0x62, 0x66], 0x2d, [0x31, 0x31, 0x1, 0x65], 0x2d, [0x62, 0x63, 0x64, 0x35, 0x64, 0x0, 0x37, 0x36]}}}]}, 0x1, 0xbaf, &(0x7f0000001380)="$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") (async)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) (async)
ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000c00)={[0x8001]})
r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc415811a2970bbb79c9fe1c95293dbe00000036b03632dab46a43226a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8, @ANYRES64, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="7b8eb47a42f5dc0f8b79825f0547187313016ec6df713f691656646ebc4e8515b28415035664ad6dcfdc39308160e48db98e20a63e69637f6a3d1d6876d0671e79b5f7fddd4579b2a1739875bc5921d08ff3c54bc1de61e4e090ce8a201084b6d299fb9c9eb05164d90b42a45e11785c3faea816feef9996c68c98fc3840dd143d2caae0e641aeec5a67dee070c3f9edbe01d73092bad65a11a31788288b329d83239c224fc712154237fb82c0727b2e05b18386a18b88d5b849d7e33d9f87002b07015fc5b9f6efab96c4f29ad518855c", @ANYRES8=0x0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f0000000600)="$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")
renameat2(r0, &(0x7f0000000c40)='./file0\x00', r2, &(0x7f0000000c80)='./file0\x00', 0x6) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x20) (async)
setresuid(0x0, 0xee00, 0x0) (async)
llistxattr(&(0x7f0000000bc0)='./file0\x00', 0x0, 0x0)
close(r2) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000080), 0x4) (async)
getpid()
recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/180, 0xb4}], 0x1}, 0x40000100) (async)
sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='c', 0x1}], 0x1}, 0x2000c080) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0, 0xa80404af4f2625a8)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, 0x0)

8.720038267s ago: executing program 5 (id=1117):
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
link(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x1010, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x40000000000009f, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x366, 0x10, &(0x7f00000013c0), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001440)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r2, &(0x7f00000014c0), &(0x7f0000001500)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
recvfrom$inet6(r0, &(0x7f0000001580)=""/3, 0x3, 0x10000, 0x0, 0x11)

8.69198487s ago: executing program 35 (id=1117):
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
link(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x1010, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x40000000000009f, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x366, 0x10, &(0x7f00000013c0), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001440)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r2, &(0x7f00000014c0), &(0x7f0000001500)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
recvfrom$inet6(r0, &(0x7f0000001580)=""/3, 0x3, 0x10000, 0x0, 0x11)

7.551848184s ago: executing program 0 (id=1125):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000040, &(0x7f0000000080), 0x1, 0x5a3, &(0x7f0000000380)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7)
semget(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_getscheduler(r0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000b80)=0x4)
r1 = syz_open_dev$MSR(&(0x7f0000000bc0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000c00)=""/102384, 0x18ff0)
perf_event_open(&(0x7f0000019c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000019d40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)={0x14, r3, 0x701, 0x10003, 0xffdfffea, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$printer(0x5, 0x58, 0x0, 0x0)
syz_create_resource$futex(&(0x7f0000019e40)=0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019e80)={'veth1_virt_wifi\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019ec0)={0xffffffffffffffff, r4, 0x25, 0x4, @val=@tcx}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000003"], 0x50)

6.544777565s ago: executing program 0 (id=1128):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000001780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f00000006c0)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r3, 0x40104d01, &(0x7f00000003c0)="000602")
r4 = dup(r0)
openat$cgroup_type(r4, &(0x7f0000000140), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000400000071107b000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
socket$kcm(0xf, 0x3, 0x2)
io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x0, 0x3800})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000580)={0x0, 0x970, 0x1f480, 0x2, 0x325})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000100)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)

6.09482814s ago: executing program 0 (id=1129):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x1c8, 0x98, 0x98, 0x2a0, 0x1c8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x9}}}, {{@ip={@remote, @loopback, 0xffffff00, 0xff, 'veth0_macvtap\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x2, 0x26}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xfa}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xa89, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e21}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x4, 0x3, 0x4, 0x2, 0x0, 0x4], 0x5, 0x5}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x1000040, &(0x7f0000000700)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f0000000780)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQFNGVzc6mabpbN2k3W7O/H8zu+85M5nnfmX3e7AwzbAB963D9JY14KiLOJxHDG5YNRLbwcGO91ZWl4t2VpWIStdqFX5JIIuLOylKxuX6SvR+IiOWI+H9EfJOPOJqub3JPs1BdWJwaL5dLs1l9ZG768kh1YfHYpenxydJkaebEiy+dOn3y1NjxsY3NvVvbWMtvra/Xfrz+7rXvXrl5/dPPDi0X3x9P4kwMZcs29uNxauyTfJzZNP9kN4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6DO9I8oItqgxG1dRuKQB9IJD30qeb3gPr5b3Paye8ft842TkDqcVdXlorvRDP+QOPaROxdOzfZ/2ty35lJ/Xzz4E42lF1p+WpEjA4MPPj5T7LP3/aNPo4G0lVfn20cqAePf7o+/kSL8Weoee30ETXHv9Vs/FttET/XZvw732GMP17/6aO28a8OxtMt4yfr8ZMW8dOIeLPD+Dde+/J0u2W1jyOOROv4TcnDrw+PXLxULo02XlvG+OrIoZfb9z9if5v4jWu2e9casrH/e7I2pR32/4tvP39m+SHxn3/24ce/1f7fFxHvdRj/P3c+ebXdsltXk9v1bwFbPf5J5ONmh/FfOHP4h6zoqiEAAAAAAAAAADxG6dq9bElaWC+naaHQeIb3v7E/LVeqc0cvVuZnJhr3vB2MfNq802q4UU/q9bHsftxm/fim+olcFjC3b61eKFbKEz3uOwAAAAAAAAAAAAAAAAAAADwpDmx6/v+33Nrz/5t/rhrYrdr/5Dew28l/6F/353/Ss3YAO8//f+hbNfkP/Uv+Q/+S/9C/5D/0L/kP/Uv+Q/+S/wAAAAAAAAAAAAAAAAAAAAAAAAAA0BXnz52rT7W7K0vFen1iYGF+qvLWsYlSdaowPV8sFCuzlwuTlcpkuVQoVqb/bntJpXJ5NGbmr4zMlapzI9WFxTemK/Mzzd8ULeW73iMAAAAAAAAAAAAAAAAAAAD45xlam5K0EJFv1NO0UIj4V0QcTCK5eKlcGo2If0fE97n8YL0+1utGAwAAAAAAAAAAAAAAAAAAwC5TXVicGi+XS7PdKwxkoboYovPCwFZWjojlRwn6e61Wu39OfYtb3k4+24E93nW7o5B7Mj6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qXsP/Xb6F392t0EAAAAAAAAAAAAAAAAAAADQl9Kfk4ioT0eGnxvavHRPsppbe4+It29c+ODK+Nzc7Fh9/u31+XMfZvOP96L9QKeaeZpGRD2PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHuqC4tT4+VyaXabhcEO1ul1HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2468AAAD//3+o0IY=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000d80)='2', 0x1, 0x8000c61)

5.861521813s ago: executing program 0 (id=1131):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa, 0x6a}}, './file1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000020", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x7c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x205, 0x8401)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1, 0xfffc, 0x7895}, 0x789d, 0xbef, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000600)="d5", 0x1)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0x8}, {}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='keyA keyB 200000 000 0 \\', 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe000001"], 0x2c}}, 0x0)
perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x400, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x6, 0x10000}, 0x2, 0xfffc, 0x0, 0x8, 0x585, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

5.446232075s ago: executing program 1 (id=1136):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0)
ptrace(0x4207, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x6, &(0x7f0000000480)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000004c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000500)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (fail_nth: 20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newnexthop={0x24, 0x68, 0x501, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}]}, 0x24}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x548, 0xffffffff, 0x0, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x4b0, 0x4b0, 0x4b0, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x2, 0xa, [0x19, 0x34, 0x3e, 0x5, 0x21, 0x0, 0x2, 0xd, 0x3e, 0x6, 0x17, 0x23, 0xa, 0x1, 0x2f, 0x26], 0x0, 0x10, 0x9}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x319}}}, {{@uncond, 0x0, 0x2c8, 0x328, 0x0, {}, [@common=@icmp={{0x28}, {0xd, '+\t'}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3a, 0x0, [{0x2, 0x7f, 0x87, 0x8000}, {0x7, 0x6, 0x40, 0x6}, {0xfff9, 0x0, 0x81, 0x1}, {0x8000, 0x6e, 0x81, 0x2}, {0x1, 0x71, 0x8, 0xff}, {0xada5, 0x18, 0x1, 0x8}, {0x3, 0x8d, 0x1, 0x9}, {0x7ff, 0x8, 0x9, 0xc062}, {0x6, 0xa5, 0x3, 0xff5}, {0xbb, 0x7b, 0x0, 0xe}, {0x8, 0x80, 0x9, 0x8}, {0x6b9b, 0x1, 0x2, 0x4}, {0x10, 0x7, 0x2, 0x3db}, {0x80, 0x4, 0xc0, 0x2}, {0x9, 0x0, 0x8}, {0x7f, 0x2, 0x1, 0x5}, {0x1000, 0x6, 0x4, 0x2}, {0xe, 0x20, 0x5, 0x8}, {0xff, 0x2, 0x3, 0x33}, {0x1, 0x10, 0x6, 0x8000}, {0x0, 0x3, 0xdc, 0xc4ac}, {0xe0f0, 0x0, 0x9, 0xf}, {0xd265, 0xf0, 0x2, 0x4}, {0x1ff, 0xfd, 0x60, 0xffffff7f}, {0x2, 0x8, 0x6, 0x9}, {0x3, 0x8, 0x0, 0x7}, {0xd, 0x7, 0x4, 0x2}, {0x1ff, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x8, 0xfb6}, {0x1, 0x2f, 0x7, 0x6}, {0xfffc, 0x3, 0x2, 0xcf0}, {0xff01, 0x6, 0x3}, {0x3, 0x3, 0x1, 0x5}, {0xfe00, 0x3c, 0x8, 0xa}, {0xb, 0x3, 0x8, 0xe5a5}, {0x55, 0xe4, 0x0, 0x7ff}, {0x3, 0x14, 0x7}, {0x8, 0xd7, 0x4, 0xdac}, {0xeb, 0x5, 0x6, 0x4a}, {0x5, 0x4, 0x5, 0x8}, {0xe, 0x3, 0x10, 0x7}, {0x4bb4, 0x0, 0x8, 0x3}, {0x9, 0x4, 0x7, 0x5}, {0x9, 0x1c, 0x3, 0x8}, {0x8001, 0x7, 0x3, 0x6}, {0xc40, 0x38, 0xee, 0xde}, {0x1, 0x6, 0x1}, {0x3, 0x2, 0x3b, 0x2}, {0xd, 0x5, 0x1, 0x2}, {0x1ec, 0x0, 0xb, 0x3}, {0x0, 0x3, 0x5e, 0x7}, {0x1, 0x9, 0x2, 0x4}, {0x2, 0x7, 0x8, 0x1}, {0x8, 0xf, 0x5, 0x80000000}, {0x0, 0x2c, 0x5, 0x9}, {0x1d0, 0x2b, 0x80}, {0x7, 0x73, 0x85}, {0x5, 0x80, 0x0, 0x7f}, {0xff01, 0x3, 0x2f, 0x2}, {0x44, 0x0, 0x4, 0x3ff}, {0x2, 0x4, 0x2, 0x9}, {0x7, 0x6, 0x40, 0xff}, {0x9, 0x7, 0x80, 0x2}, {0x7, 0xc, 0x4}], {0x6}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xb, [0x21, 0x28, 0x30, 0x1d, 0x3b, 0x2c, 0x27, 0x3e, 0x2f, 0xb, 0x10, 0x2, 0x1e, 0x26, 0x34, 0x6], 0x1, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000014c0)='fd/3\x00')
io_uring_setup(0x78b7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0)
openat$binderfs_log(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x3810744, &(0x7f0000000c00)={[{@nomblk_io_submit}, {@noinit_itable}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@delalloc}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000000cc0)="$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")
creat(&(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

5.351824824s ago: executing program 0 (id=1137):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$selinux_access(r0, 0x0, 0x41)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x2, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$l2tp(0x2, 0x2, 0x73)
getsockname$l2tp(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1001})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@newtfilter={0xa4, 0x2c, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x74, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "e8c8bf0021efab755c73081896e5ccdc"}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xa4}}, 0x0)
write$tun(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e00"], 0x1c)
close(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f00000002c0)=0x80000001, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, 0x0, 0x0, r8}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r9 = io_uring_setup(0x1c79, &(0x7f00000003c0)={0x0, 0x290e, 0xc000, 0x8, 0x19e})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x5d, 0x0}, 0x94)
io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.19391449s ago: executing program 0 (id=1138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000002b40000000000000000180000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=r3, @ANYBLOB="08000b00010050b10000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="150000001400010000000000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
dup(r6)
r7 = socket$inet(0x2, 0x1, 0x6)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000018c0)=0x2, 0x4)
bind$inet(r7, &(0x7f0000001900)={0x2, 0x801, @loopback}, 0x10)
listen(r7, 0x5)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000001940)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r9)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)={0x34, r10, 0x1, 0x0, 0x0, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b80)={0xf8, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x36}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x721}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008800}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c80)='./mnt\x00', 0x1ff)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0xfc}}, @TCA_RED_STAB={0x104, 0x2, '\x00 \x00'}]}}]}, 0x148}}, 0x0)
accept$inet(r7, 0x0, 0x0)

5.092792111s ago: executing program 36 (id=1138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000002b40000000000000000180000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=r3, @ANYBLOB="08000b00010050b10000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="150000001400010000000000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
dup(r6)
r7 = socket$inet(0x2, 0x1, 0x6)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000018c0)=0x2, 0x4)
bind$inet(r7, &(0x7f0000001900)={0x2, 0x801, @loopback}, 0x10)
listen(r7, 0x5)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000001940)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r9)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)={0x34, r10, 0x1, 0x0, 0x0, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b80)={0xf8, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x36}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x721}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008800}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000001c80)='./mnt\x00', 0x1ff)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0xfc}}, @TCA_RED_STAB={0x104, 0x2, '\x00 \x00'}]}}]}, 0x148}}, 0x0)
accept$inet(r7, 0x0, 0x0)

4.477022412s ago: executing program 1 (id=1143):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x13}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="540000000b0601020000000000000000020000000900020073797a300000000005000100070000002c0007800c00018008000140ffffffff0c00148008000140ffffffff06000440500000000500070006000000ebb58ef1f5b5c0d250028f0f417901451951fa3d1e2a124fb38122315ffffbaf3e795d6824e28ffd39a6b35ab0f39537a1019e76b83f3113fc4b"], 0x54}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000009c0)={0x900, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000000000000000000000000005000004000000000000000000002c0030000000c7c11735ebed872cd8d560cd482d45dc098b3a"], 0x38}}, 0x40408c0)
perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0xec, 0x0, 0x0, 0x8, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa69, 0x0, @perf_config_ext={0x71, 0xe7}, 0x114905, 0x4, 0xfffffffe, 0x1, 0x0, 0x0, 0x1000, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="280000001800290200000000ffdbdf250a00000008000000040000000400088008001e0067"], 0x28}}, 0x0)

4.39169667s ago: executing program 1 (id=1144):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_vlan={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0xb}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x552, 0xd9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4808, 0x0, 0x7, 0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ptype\x00')
pread64(r2, &(0x7f0000000640)=""/81, 0x51, 0x2f)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0)
r3 = openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000006c0)={0x2, <r4=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={r4, 0x9, 0x18}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$inet(0x2, 0x80001, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000010425bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000005800128009000100766c616e000000004800028006000500810000000600010003000000340004800c000100020000000d0000000c00010006000000030000000c00010001000000060000000400000000000800ccdc000008000500", @ANYRES8=r5], 0x80}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000004000000000000330000000a0101010000000000000000000000000000000000000000000000000000fbffffff000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000001000000000000000000000000000000000000000000000081000000000000000100000000000000000000000a000100ac000000000000001c0017000000020000000000ffffffff000000000000000004000000480001"], 0x15c}}, 0x40)
write$nsim_del_device(r3, &(0x7f0000000380)={0x0}, 0x1)

4.031371786s ago: executing program 1 (id=1145):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa, 0x6a}}, './file1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000020", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x7c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x205, 0x8401)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1, 0xfffc, 0x7895}, 0x789d, 0xbef, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000600)="d5", 0x1)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0x8}, {}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='keyA keyB 200000 000 0 \\', 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe000001"], 0x2c}}, 0x0)
perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x400, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x6, 0x10000}, 0x2, 0xfffc, 0x0, 0x8, 0x585, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

3.957597674s ago: executing program 7 (id=1108):
set_mempolicy(0x3, &(0x7f0000000180)=0xfffffffffffffff7, 0x5)
r0 = shmget$private(0x0, 0x800000, 0x800, &(0x7f0000173000/0x800000)=nil)
shmat(r0, &(0x7f0000229000/0x3000)=nil, 0xffffffffffffefff)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
lstat(0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x244)
r5 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, r5)
setpgid(0x0, r5)
r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'macsec0\x00'})
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$cgroup_int(r6, &(0x7f00000005c0)=0x3, 0xe)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0)

3.629853217s ago: executing program 7 (id=1146):
prctl$PR_GET_SECCOMP(0x15)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24042840)
r3 = socket(0xa, 0x3, 0xff)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x6)
syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x800000, &(0x7f0000000b00)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000000c00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0x42, 0x40)
fallocate(r5, 0x0, 0x8e14, 0x8ffff)
ptrace(0x4206, r4)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r4, 0x0, 0x2000000a, 0x0)
sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="671723d7c6012c", 0x20}, {&(0x7f00000003c0)="9e91d91a92dc7c8fa2c24fbe79d9344d0c668de5d6c228230000555f00000000000000fb31", 0x25}], 0x2}, 0x20008b88)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000001304000000000001d2de3bcaf335cd000f36cd2787fb0f29c615485b9b6ef6ca538eaf27d2cda15fd6009b90046faeddff5fb07d2eb7c08885a3113dd150d4a8eeb0f9797f0fa7dda90af5bd25f40dec3cff4fe909880ec996a76d4a6f4e6a01448e4c323ac9694bea85ba7c2c57638d03a3be7b398be27dd31359a66d22f5c046a3d8d002b514e6841b8fed5f78dc"], 0x0, 0x26}, 0x28)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0xe8}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r8, 0x86dd, 0x12, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.582625042s ago: executing program 1 (id=1147):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setns(0xc9, 0x10000000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
fcntl$setsig(r0, 0xa, 0x2b)
syz_mount_image$ext4(&(0x7f0000001b00)='ext4\x00', &(0x7f0000001b40)='./file1\x00', 0x815, &(0x7f0000001b80), 0x9, 0x624, &(0x7f0000001c00)="$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")
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/221, 0xdd}], 0x1, 0x804, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000002c0)={0x0, 0x9f, 0x386})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
sendmsg$nl_route(r1, 0x0, 0x40080)
prlimit64(0x0, 0xe, &(0x7f0000002240)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002280)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000022c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000023c0), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f0000002400), 0x10106, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000024c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r6, &(0x7f0000002500)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r6, &(0x7f0000002540), 0xffffffffffffff94, 0x2000, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='debugfs\x00', 0x1214040, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200})
recvfrom$inet(r6, &(0x7f0000002580)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket$nl_generic(0x10, 0x3, 0x10)

3.382230962s ago: executing program 1 (id=1148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x4040040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bond0\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = dup(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000e80)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000001200), 0x318, 0x0)
recvmmsg(r5, &(0x7f0000001240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x2)
mkdirat(r2, 0x0, 0x3)
gettid()
timer_create(0x1, &(0x7f00000012c0)={0x0, 0x21, 0x4}, &(0x7f0000001300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = fsopen(&(0x7f0000001340)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x83)
openat(0xffffffffffffff9c, &(0x7f0000001380)='./file2\x00', 0x0, 0x2)

3.327809797s ago: executing program 37 (id=1148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x4040040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bond0\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = dup(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000e80)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000001200), 0x318, 0x0)
recvmmsg(r5, &(0x7f0000001240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x2)
mkdirat(r2, 0x0, 0x3)
gettid()
timer_create(0x1, &(0x7f00000012c0)={0x0, 0x21, 0x4}, &(0x7f0000001300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = fsopen(&(0x7f0000001340)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x83)
openat(0xffffffffffffff9c, &(0x7f0000001380)='./file2\x00', 0x0, 0x2)

2.665510143s ago: executing program 7 (id=1152):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2cb, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa, 0x6a}}, './file1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000020", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000380)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x7c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x205, 0x8401)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000500)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1, 0xfffc, 0x7895}, 0x789d, 0xbef, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000600)="d5", 0x1)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x6, 0x8}, {}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='keyA keyB 200000 000 0 \\', 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe000001"], 0x2c}}, 0x0)
perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x400, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x6, 0x10000}, 0x2, 0xfffc, 0x0, 0x8, 0x585, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2.39240051s ago: executing program 6 (id=1154):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r0, &(0x7f0000000440)="a904c516999c6776c48a6a4285044bbb3c9e47c1f89f042f6f7c030b50582ec28f73a35bf378366258fb7ae7febbdc7ddf01e11291c6682e95f395f7a1fab594208dceebb18ce4311724a07f3c89495dfe975049a386", 0x56, 0x40000, &(0x7f00000004c0)={0x2, 0x0, @local}, 0x10)
openat$nsim_new_device(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
socket$inet(0x2, 0xa, 0x400)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
fcntl$setstatus(r1, 0x4, 0x40800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x141a42, 0x15)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={<r5=>0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f00000005c0)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000600)={r5, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000006c0)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000000700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000780)={0x1, 0xe295}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x2c2f, &(0x7f0000000140)={0x0, 0x555d, 0xc000, 0x10000002, 0xc1, 0x0, r1})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1608000004"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
prctl$PR_SCHED_CORE(0x4d, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000380)={0xfffffffd, 0xfd, 0x0, '\x00', 0x1}, 0x1)
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f00000003c0)={0x1, 0x0, 0x1, '\x00', 0xe}, 0x1)
io_uring_enter(0xffffffffffffffff, 0x0, 0x3f, 0x9, &(0x7f0000000400), 0x18)
io_uring_enter(r6, 0x4095, 0x7721, 0x16, 0x0, 0x500)

2.325982657s ago: executing program 6 (id=1155):
set_mempolicy(0x3, &(0x7f0000000180)=0xfffffffffffffff7, 0x5)
r0 = shmget$private(0x0, 0x800000, 0x800, &(0x7f0000173000/0x800000)=nil)
shmat(r0, &(0x7f0000229000/0x3000)=nil, 0xffffffffffffefff)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
lstat(0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x244)
r5 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, r5)
setpgid(0x0, r5)
r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'macsec0\x00'})
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$cgroup_int(r6, &(0x7f00000005c0)=0x3, 0xe)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0)

2.187494071s ago: executing program 7 (id=1157):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c636865636b3d7300006963742c646d6f64653d3078303030303030303030303030303030302c6e00726f636b2c6d6f64658d9a7aeabad1d6e93d0000303030303030303030303030303030372c696f636861727365743d6370313235352c73686f776173736f632c6d61703d6f66"], 0x0, 0x3fc, &(0x7f00000003c0)="$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")
getdents64(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000b0feffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035080100000040009500000000000000b7020000000000007b9af8ff000000007509fdff030000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)

1.99570953s ago: executing program 6 (id=1158):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r1=>0x0})
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={<r2=>0x1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}}}, &(0x7f00000000c0)=0x84)
setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000100)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x4e20}, 0x90)
sendmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x1d, r1}, 0x10, &(0x7f00000006c0)={&(0x7f0000000700)=@can={{0x0, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "85928451bfb6c9a5"}, 0x10}, 0x2, 0x0, 0x0, 0x80}, 0x40019)

1.956912954s ago: executing program 8 (id=1159):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000240)=0xc)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

1.89914666s ago: executing program 6 (id=1160):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000c16, &(0x7f00000000c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000b40))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x8a141, 0x59)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65747073f736f36930323900"], 0xa)
pwrite64(r1, &(0x7f0000000c00)="f6", 0xffffff07, 0x8000c61)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001680)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000016c0)={r4, r3})
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x181441, 0x148)
r5 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r5, 0x80000000)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2)

1.824370327s ago: executing program 7 (id=1161):
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffeffffffffff]}, 0x0, 0x8)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1064c, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0x7, &(0x7f0000000a40)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000a80))
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./trace\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{0x3495, 0x6, 0x7, 0x3e}, {0x401, 0x5, 0x3, 0x2}, {0x7ff, 0x1, 0x3, 0x7}, {0xf, 0x3, 0xfc, 0x5}, {0x3, 0x42, 0x0, 0xa}, {0x1, 0x7, 0x2, 0x80000000}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0xfffffeb5}, 0x28)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x8b, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000200)=0x10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000480)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xe8)
mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2020000, &(0x7f0000000a80)={[{@usrquota}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x2d, 0x35, 0x37, 0x36, 0x38, 0x33]}}}}, {@huge_always}], [{@flag='silent'}, {@uid_eq={'uid', 0x3d, r4}}, {@fsname={'fsname', 0x3d, '!{.{'}}, {@fowner_gt={'fowner>', r5}}, {@appraise}, {@uid_eq}, {@fowner_eq={'fowner', 0x3d, r6}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]})

1.777899272s ago: executing program 38 (id=1161):
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffeffffffffff]}, 0x0, 0x8)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1064c, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0x7, &(0x7f0000000a40)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000a80))
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./trace\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{0x3495, 0x6, 0x7, 0x3e}, {0x401, 0x5, 0x3, 0x2}, {0x7ff, 0x1, 0x3, 0x7}, {0xf, 0x3, 0xfc, 0x5}, {0x3, 0x42, 0x0, 0xa}, {0x1, 0x7, 0x2, 0x80000000}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0xfffffeb5}, 0x28)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x8b, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000200)=0x10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000480)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xe8)
mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2020000, &(0x7f0000000a80)={[{@usrquota}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x2d, 0x35, 0x37, 0x36, 0x38, 0x33]}}}}, {@huge_always}], [{@flag='silent'}, {@uid_eq={'uid', 0x3d, r4}}, {@fsname={'fsname', 0x3d, '!{.{'}}, {@fowner_gt={'fowner>', r5}}, {@appraise}, {@uid_eq}, {@fowner_eq={'fowner', 0x3d, r6}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]})

1.608399739s ago: executing program 8 (id=1163):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x8, &(0x7f0000000100)={[{@orlov}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000002840)="$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")
bind$inet6(0xffffffffffffffff, &(0x7f0000002d80)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000002dc0)={0x8, 0xffffffffffffffff}, 0x0)
r0 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)='-{@:[#\x00', 0xfffffffffffffffd)
sched_setscheduler(0x0, 0x2, &(0x7f0000002e00)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700))
sched_setscheduler(r1, 0x1, &(0x7f0000000840)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ec0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000002f00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000002f80), 0x318, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003500)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
recvmmsg(r3, &(0x7f0000003580), 0x10106, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003600)={'ip6_vti0\x00', 0x0})
keyctl$invalidate(0x15, r0)
r6 = syz_ublk_setup_io_uring(0x4dca, &(0x7f0000000640)={0x0, 0xd377, 0x2000, 0x1, 0x261}, &(0x7f00000006c0), &(0x7f0000000880), &(0x7f0000000740))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000009, 0x401d031, r6, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x143042, 0x0)
pwritev2(r7, &(0x7f00000007c0)=[{&(0x7f0000000800)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0xe4)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r8, &(0x7f000001c6c0)=""/102384, 0x18ff0, 0x80000000000000)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f000001c640), &(0x7f000001c680)=0x14)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000f80), 0x208e24b)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
fdatasync(r9)

702.72654ms ago: executing program 8 (id=1164):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES16], 0xe8}, 0x1, 0x0, 0x0, 0x4004054}, 0x4080)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000c40)={0x802}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="18800000ff0700000000100000000000026200000004005b80"], 0x18}}, 0x0)
r0 = perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000dc0)={0x9, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x9}}, 0x0, 0x0, r0, 0x0)
setns(0xc9, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xfd90, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00', 0x4, 0xfd90, &(0x7f00000011c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000012c0), 0x366, 0x10, &(0x7f0000001300), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r5}, &(0x7f0000001400), &(0x7f0000001440)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/229, 0xfcf5}], 0x5}, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x18, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
r8 = memfd_secret(0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x1)
r9 = io_uring_setup(0x68f6, &(0x7f0000000180)={0x0, 0xe6f1, 0x1, 0x4, 0x100016b})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0}, 0x94)
r10 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000440)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
r11 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r11, 0x29, 0x2a, &(0x7f00000007c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90)
close_range(r9, 0xffffffffffffffff, 0x0)

664.647854ms ago: executing program 6 (id=1165):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000040, &(0x7f0000000080), 0x1, 0x5a3, &(0x7f0000000380)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7)
semget(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_getscheduler(r0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000b80)=0x4)
read$msr(0xffffffffffffffff, &(0x7f0000000c00)=""/102384, 0x18ff0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019c00)=0x410000002)
perf_event_open(&(0x7f0000019c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000019d40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)={0x14, r2, 0x701, 0x10003, 0xffdfffea, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$printer(0x5, 0x58, 0x0, 0x0)
syz_create_resource$futex(&(0x7f0000019e40)=0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019e80)={'veth1_virt_wifi\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019ec0)={0xffffffffffffffff, r3, 0x25, 0x4, @val=@tcx}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000003"], 0x50)

485.759042ms ago: executing program 8 (id=1166):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r0, &(0x7f0000000440)="a904c516999c6776c48a6a4285044bbb3c9e47c1f89f042f6f7c030b50582ec28f73a35bf378366258fb7ae7febbdc7ddf01e11291c6682e95f395f7a1fab594208dceebb18ce4311724a07f3c89495dfe975049a386", 0x56, 0x40000, &(0x7f00000004c0)={0x2, 0x0, @local}, 0x10)
openat$nsim_new_device(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
socket$inet(0x2, 0xa, 0x400)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
fcntl$setstatus(r1, 0x4, 0x40800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x141a42, 0x15)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={<r5=>0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f00000005c0)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000600)={r5, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000006c0)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000000700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000780)={0x1, 0xe295}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x2c2f, &(0x7f0000000140)={0x0, 0x555d, 0xc000, 0x10000002, 0xc1, 0x0, r1})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1608000004"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
prctl$PR_SCHED_CORE(0x4d, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000380)={0xfffffffd, 0xfd, 0x0, '\x00', 0x1}, 0x1)
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f00000003c0)={0x1, 0x0, 0x1, '\x00', 0xe}, 0x1)
io_uring_enter(0xffffffffffffffff, 0x0, 0x3f, 0x9, &(0x7f0000000400), 0x18)
io_uring_enter(r6, 0x4095, 0x7721, 0x16, 0x0, 0x500)

354.890755ms ago: executing program 8 (id=1167):
set_mempolicy(0x3, &(0x7f0000000180)=0xfffffffffffffff7, 0x5)
r0 = shmget$private(0x0, 0x800000, 0x800, &(0x7f0000173000/0x800000)=nil)
shmat(r0, &(0x7f0000229000/0x3000)=nil, 0xffffffffffffefff)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
lstat(0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x244)
r5 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, r5)
setpgid(0x0, r5)
r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'macsec0\x00'})
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$cgroup_int(r6, &(0x7f00000005c0)=0x3, 0xe)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0)

312.172719ms ago: executing program 8 (id=1168):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_vlan={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0xb}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x552, 0xd9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4808, 0x0, 0x7, 0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ptype\x00')
pread64(r1, &(0x7f0000000640)=""/81, 0x51, 0x2f)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0)
r2 = openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000006c0)={0x2, <r3=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={r3, 0x9, 0x18}, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$inet(0x2, 0x80001, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000010425bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000005800128009000100766c616e000000004800028006000500810000000600010003000000340004800c000100020000000d0000000c00010006000000030000000c00010001000000060000000400000000000800ccdc000008000500", @ANYRES8=r4], 0x80}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000004000000000000330000000a0101010000000000000000000000000000000000000000000000000000fbffffff000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000001000000000000000000000000000000000000000000000081000000000000000100000000000000000000000a000100ac000000000000001c0017000000020000000000ffffffff000000000000000004000000480001"], 0x15c}}, 0x40)
write$nsim_del_device(r2, &(0x7f0000000380)={0x0}, 0x1)

0s ago: executing program 6 (id=1169):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20018895}, 0x24000000)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
r2 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
dup3(r2, r2, 0x80000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x4a, 0x0, 0x6}, 0x28)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f0000000f00)={0x2d8, r3, 0x400, 0xb7, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd3}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x131, 0x2a, [@link_id={0x65, 0x12, {@random="f0e593be7fb1", @device_b, @device_b}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @dsss={0x3, 0x1, 0xb3}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @measure_req={0x26, 0xdc, {0xd, 0x7, 0x3, "f335f700fa9acb25037318e407dd82d3d0ba08d744a46f361b5db6f4751de54ab3f9744457ba1e197c71b86915ae938a157ad87a4cabbdbf65f19150e63a735e72c8e1c193df2fa8e87078f2617c58f9c6c4de05db4ce529941ac92d4a076f1b325db87f74d868053ad32df522fde017f2e40c4749c1ccac5f23bf83abf255adca97bbbf0229c62abf87eec7607f692cad63077a34475abd95563a0d61b7de6aff8c65472e4ae82c1d04d240913d56e351932c8a218743c58f0fe6cf3628db8b53530a850d57a1b6d35235661b2ec177ee33483e7c9bc4da2c"}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0xc}}, @ht={0x2d, 0x1a, {0x2000, 0x0, 0x4, 0x0, {0x5, 0x8c7, 0x0, 0x219, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfffffffe, 0x7}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x15a, 0x2a, [@mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x41, "aecb7c215d8f3d8cd4153f653ed48567327b361245bb2cfc9ebd2391a437790f803e78e9ebd296e653bab27e8b01c5aefdd2cef665efc468fca90c42e2e8dc179d"}, @measure_req={0x26, 0xce, {0x8, 0x4, 0x2, "deb1e75be55ea1f18def57cb1082354a828a2dfa2a9bbe5cd637f479f1939664668754d31414a1f1a7acd12ef5a4aa2438ed55bb3ba61bdace82d9fbe5607fb7b91ed5ade4ed2bfae9c72b2a47e633df6783fe14ad0636c647d6273083ae13ca7eded397589847e1ea0dc1afebcd091925b59f2c35897376dae7ccf84c260cb1d1c39fb62e7448e0824201609e8d94497d7cf25d93dcea5ea15c57090200121377784afe660b7b379d793c99cc4f459791534a4d4c4b2c3cff96b773d007e07d38afc617ec8292b1a5b91c"}}, @perr={0x84, 0x2, {0x7f}}, @measure_req={0x26, 0x35, {0x10, 0x4, 0x2, "07044e079ebccf601216164087771e79b42454b5fa4c8f46b5415aa5f95e22acdc1ceae3c2094bf3ce5f22dba9e38c34410f"}}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010)
socket$unix(0x1, 0x2, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x804818, &(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8=r1, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r5, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c1722f4866c3b851cb7d97bffea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426ba9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a600858512b16d9cce2410663a060a7694b4a343448c749092b67567edbe", @ANYRESDEC=r5, @ANYRESOCT=r0, @ANYRESOCT=r5], 0x2, 0x5a2, &(0x7f0000000900)="$eJzs3W9P29odwPGfKdxmmcSm3amqEO09l24Slbipk9wGRfeR55wE35vYke1cwaMKlVChhnYrnTR40vGk26TtRXQP9yL2UibtBVR7AXuQyccOpJA/pUBh6PtB1Cf28Tk/m+j8aoiPBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdPzO+tqPLcWBq3jl9nep1bIww8WE/oVsZJvyeXkbrrq7i+PN99J/lmSxfTVouSSRU4Ofnrn5999OTsz2H9CwGfy909saW//4Plmr9d9dVGBXEP3bo/f1tC+FwVey2lo5UWBqlYq9qO1eqTqXlNHG1GsW8oNtRMHoVp2H6pitVpWurARdPxGzWnqwcrVb0q2XVHfF9raCaPAf/R9IXLXvGbT8xumTrI5qbOavBF/8GIVa6el1PZOr1uedgBJpeLHVCpNq1SyS6VisVQqVh5XH6/a9uypFfYJcqrGxb1p8f/pAkdv4HxmsvwvTfHEl46sixr55UpNQgmkNWZ7ZpD/f/1IT+x3OP8Psvzd480LYvL//fTV/XH5f0wsn+9rT/blQJ7LpvSkJ115deURnenri+S0nqeFhmjxxZNIAvGkJY5Zo7I1SqpSkYrY8kTWpD6X9FYXT5qiJZINiSQWPdsy765QtDgSSyChKFkWVx6KkqJUpSplUaKlIBsSSEd8aUhNHNPKtuyY814WZY2L8ahScexh5Afvu66UJhwt+R+fqt8flC5w9AbOpz/I/wAAAAAA4MayzG/f58z3PfO67jW1fdVhAQAAAACAC2T+8r+YLMyns+6JxfU/AAAAAAA3jWXusbNEJC9fpaVtscztUvwSAAAAAACAG8L8/f9+sjBzoHwl1tF0KVz/AwAAAABwQ/x56hz7Ufu29c//SBjOWYft9V9Zu2ZuXmf3VrrfrZMtxvWF//b7fdOIaauSLmZnXb1o5dJKR5Ngvs8W29PisI4DcI4C+OOYAKz5bO/hAL6clb/K12mdr7fS5Va25WdpL/m619QFN2h+VxTHmZ+J9Xr8+xc7fxBz+H/xW/NWTnZ63cLTl70tE8th0srhbjaB4ql5FCfE8trMt2DuuRh5xHPmRoys37wl2zu9rt1ev5217OzOpIWZD3t8Mz+hz7eylNZayma8zQ+2pH3mkj6LhXFHn0VRPOeRv5UHaZ0Hyw/SxYgoStOiKA1HMfpcnD+K8rQoyueMAgCuyvaULGTJqbz7CaPcieyeDHsfkd3ljNn9rSyndZYXzMA6uzBiRLfTET03dkS3z5nd/nHqGUjjcmzS799OZNV3yQ7vxvYbNUtWcgpvvd79rdzZ2z/4Zmd381n3WfdFqVSu2N/a9uOSzJnDyBbkHgDACINn7OREctbI/D/pKTz9fpK7v82uqg9PXlVnGe8XRx8pKMhTeSk92ZIVc7eB+cTByP935Ic+hrAy5ao1b9Jk+oSXlQlXdV+YuxwG7ZYm1jXt/mtwlsqX/WMAAOCzWpqShyfn//TafWXKdfeHuXzy1XF+6GltAADgcujwvZWP/2SFodd+UqxWi068plUYuD+o0Ks1tPL8WIfumuM3tGqHQRy4QTMp/OjVdKSiTrsdhLGqB6FqB5G3bqYPVNmj3yPdcvzYc6N2UzuRVm7gx44bq5oXuard+U3Ti9Z0aHaO2tr16p7rxF7gqyjohK4uKBVpPVTRq2k/9upeUvRVO/RaTphTPwbNTkurmo7c0GvHQdrgoC/PrwdhyzRbuOqTDQDANbG3f/B8s9frvrrEwqCvyu+GOs5dzfECAIDh/H/VkQAAAAAAAAAAAAAAAAAAAAAAgHHG3Le3Kpd6R+DHF/6dxTm5ck7O3vLM9TjA4cJPJv9Qrm1hMBX0dYmHwgUUpg4dby5tUALwWfwvAAD//4rITTw=")
r7 = openat(r6, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x4)
open_by_handle_at(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000000700000000000000000001000000eb00"], 0x14101)
r8 = getpid()
kcmp(r8, r8, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x9, 0xfa9a, 0xc, 0x10000, 0x1ff})
getdents64(r1, &(0x7f0000000040)=""/124, 0x7c)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'})

kernel console output (not intermixed with test programs):

er_hwframe+0x77/0x7f
[  129.936033][ T6229] RIP: 0033:0x7f2cfb36034e
[  129.936054][ T6229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  129.936149][ T6229] RSP: 002b:00007f2cf9deefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  129.936252][ T6229] RAX: ffffffffffffffda RBX: 00007f2cf9def6c0 RCX: 00007f2cfb36034e
[  129.936269][ T6229] RDX: 000000000000000f RSI: 00007f2cf9def0a0 RDI: 0000000000000004
[  129.936285][ T6229] RBP: 00007f2cf9def090 R08: 0000000000000000 R09: 0000000000000000
[  129.936301][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.936316][ T6229] R13: 00007f2cfb626038 R14: 00007f2cfb625fa0 R15: 00007ffd713bf3b8
[  129.936343][ T6229]  </TASK>
[  130.216071][ T6237] netlink: 'syz.3.840': attribute type 3 has an invalid length.
[  130.216095][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'.
[  130.216532][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.841'.
[  130.240665][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'.
[  130.275189][ T6243] loop2: detected capacity change from 0 to 512
[  130.294562][ T6243] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.841: iget: bad i_size value: 38620345925642
[  130.294601][ T6243] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  130.294839][ T6243] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.841: couldn't read orphan inode 15 (err -117)
[  130.294877][ T6243] loop2: lost filesystem error report for type 5 error -117
[  130.295401][ T6243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.893279][ T6255] loop4: detected capacity change from 0 to 512
[  130.976347][ T6255] bio_check_eod: 2568 callbacks suppressed
[  130.976422][ T6255] syz.4.845: attempt to access beyond end of device
[  130.976422][ T6255] loop4: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  130.978666][ T6255] syz.4.845: attempt to access beyond end of device
[  130.978666][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  130.979838][ T6255] syz.4.845: attempt to access beyond end of device
[  130.979838][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  130.980507][ T6255] syz.4.845: attempt to access beyond end of device
[  130.980507][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  130.981134][ T6255] syz.4.845: attempt to access beyond end of device
[  130.981134][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  130.981686][ T6255] syz.4.845: attempt to access beyond end of device
[  130.981686][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  131.003505][ T6255] syz.4.845: attempt to access beyond end of device
[  131.003505][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  131.085855][ T6255] syz.4.845: attempt to access beyond end of device
[  131.085855][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  131.102800][ T6255] syz.4.845: attempt to access beyond end of device
[  131.102800][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  131.179158][ T6255] syz.4.845: attempt to access beyond end of device
[  131.179158][ T6255] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  131.660670][ T6273] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  132.015882][  T346] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm kworker/u8:6: bg 0: block 5: invalid block bitmap
[  132.016345][  T346] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  132.016392][  T346] EXT4-fs (loop2): This should not happen!! Data will be lost
[  132.016392][  T346] 
[  132.016412][  T346] EXT4-fs (loop2): Total free blocks count 0
[  132.016500][  T346] EXT4-fs (loop2): Free/Dirty block details
[  132.016587][  T346] EXT4-fs (loop2): free_blocks=0
[  132.016612][  T346] EXT4-fs (loop2): dirty_blocks=16012
[  132.016632][  T346] EXT4-fs (loop2): Block reservation details
[  132.016647][  T346] EXT4-fs (loop2): i_reserved_data_blocks=16012
[  132.105221][  T346] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  132.391423][ T6278] loop3: detected capacity change from 0 to 512
[  132.465005][ T6273] md: could not open device unknown-block(1,1).
[  132.481380][ T6283] loop4: detected capacity change from 0 to 1024
[  132.495237][ T6283] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  132.496599][ T6283] JBD2: no valid journal superblock found
[  132.496610][ T6283] EXT4-fs (loop4): Could not load journal inode
[  133.165278][ T3297] EXT4-fs warning (device loop2): ext4_evict_inode:261: inode #18: comm syz-executor: data will be lost
[  133.263486][   T32] Bluetooth: hci0: Frame reassembly failed (-84)
[  133.491203][ T6311] loop4: detected capacity change from 0 to 512
[  133.716283][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'.
[  133.717687][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'.
[  133.761842][ T6313] loop4: detected capacity change from 0 to 512
[  133.776722][ T6313] EXT4-fs (loop4): 1 truncate cleaned up
[  133.777359][ T6313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.869127][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.521555][   T29] kauditd_printk_skb: 191 callbacks suppressed
[  134.521571][   T29] audit: type=1400 audit(1793881347.036:1889): avc:  denied  { open } for  pid=6319 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  134.547700][   T29] audit: type=1400 audit(1793881347.066:1890): avc:  denied  { kernel } for  pid=6319 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  134.630776][   T29] audit: type=1400 audit(1793881347.146:1891): avc:  denied  { write } for  pid=6319 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  134.657903][   T29] audit: type=1400 audit(1793881347.176:1892): avc:  denied  { search } for  pid=6319 comm="syz.0.864" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  134.683694][   T29] audit: type=1400 audit(1793881347.206:1893): avc:  denied  { read } for  pid=6319 comm="syz.0.864" name="trace" dev="tracefs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  134.685553][   T29] audit: type=1400 audit(1793881347.206:1894): avc:  denied  { open } for  pid=6319 comm="syz.0.864" path="/191/tracefs_dir/trace" dev="tracefs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  134.811138][ T6323] netlink: 'syz.3.865': attribute type 3 has an invalid length.
[  134.811166][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'.
[  134.831377][   T29] audit: type=1400 audit(1793881347.356:1895): avc:  denied  { create } for  pid=6322 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  134.855256][   T29] audit: type=1400 audit(1793881347.376:1896): avc:  denied  { create } for  pid=6322 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  134.932712][   T29] audit: type=1400 audit(1793881347.456:1897): avc:  denied  { create } for  pid=6322 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  134.967730][ T6325] loop1: detected capacity change from 0 to 1024
[  134.981632][   T29] audit: type=1400 audit(1793881347.456:1898): avc:  denied  { bind } for  pid=6322 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  135.009332][ T6325] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  135.010152][ T6325] JBD2: no valid journal superblock found
[  135.010168][ T6325] EXT4-fs (loop1): Could not load journal inode
[  135.027389][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'.
[  135.096005][ T6328] loop0: detected capacity change from 0 to 512
[  135.096782][ T6328] ext4: Bad value for 'barrier'
[  135.331693][ T3511] Bluetooth: hci0: command 0x1003 tx timeout
[  135.331946][ T3655] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  135.914007][ T6346] loop2: detected capacity change from 0 to 1024
[  135.947100][ T6346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  135.947251][ T6346] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.187540][ T6355] bond0: no command found in slaves file - use +ifname or -ifname
[  136.369450][ T6363] netlink: 'syz.1.877': attribute type 21 has an invalid length.
[  136.975428][ T6369] loop1: detected capacity change from 0 to 128
[  136.987775][ T6369] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  136.988085][ T6369] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.093474][ T6372] loop4: detected capacity change from 0 to 1024
[  137.100325][ T3293] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  137.100547][ T6372] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  137.105078][ T6372] JBD2: no valid journal superblock found
[  137.105092][ T6372] EXT4-fs (loop4): Could not load journal inode
[  137.253114][ T6391] loop4: detected capacity change from 0 to 512
[  137.338436][ T6393] netlink: 56 bytes leftover after parsing attributes in process `syz.3.884'.
[  137.573667][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  138.070733][ T6413] vlan0: entered promiscuous mode
[  138.134106][ T6413] team0: Port device vlan0 added
[  138.435390][ T6416] loop2: detected capacity change from 0 to 512
[  138.454128][ T6416] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.888: inode has both inline data and extents flags
[  138.454158][ T6416] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  138.454613][ T6416] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.888: couldn't read orphan inode 15 (err -117)
[  138.454650][ T6416] loop2: lost filesystem error report for type 5 error -117
[  138.456823][ T6416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.522549][ T6416] EXT4-fs error (device loop2): __ext4_add_entry:2414: inode #2: comm syz.2.888: Directory hole found for htree leaf block 0
[  138.595248][ T6422] loop0: detected capacity change from 0 to 512
[  138.611166][ T6422] EXT4-fs: Ignoring removed orlov option
[  138.611189][ T6422] EXT4-fs: Ignoring removed nobh option
[  138.611234][ T6422] EXT4-fs: Ignoring removed nomblk_io_submit option
[  138.611295][ T6422] EXT4-fs: Ignoring removed bh option
[  138.694808][ T6426] loop3: detected capacity change from 0 to 128
[  138.724696][ T6426] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  138.724922][ T6426] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.772832][ T6422] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  138.773285][ T6422] EXT4-fs (loop0): 1 orphan inode deleted
[  138.773606][ T6422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.845772][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  138.985657][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.438375][ T6442] loop3: detected capacity change from 0 to 1024
[  139.470140][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.491307][ T6442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  139.491474][ T6442] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.537503][   T32] Bluetooth: hci0: Frame reassembly failed (-84)
[  139.538585][ T6451] loop0: detected capacity change from 0 to 128
[  139.552130][ T6451] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.552523][ T6451] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.560703][ T6451] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #2: comm syz.0.898: checksumming directory block 0
[  139.564452][ T6451] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #2: comm syz.0.898: checksumming directory block 0
[  139.565264][ T6451] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #2: comm syz.0.898: checksumming directory block 0
[  139.567156][   T29] kauditd_printk_skb: 249 callbacks suppressed
[  139.567171][   T29] audit: type=1400 audit(1793881352.076:2148): avc:  denied  { write } for  pid=6448 comm="syz.0.898" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  139.652052][   T29] audit: type=1400 audit(1793881352.166:2149): avc:  denied  { ioctl } for  pid=6455 comm="syz.4.899" path="socket:[14567]" dev="sockfs" ino=14567 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  139.711770][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'.
[  139.711820][ T6460] FAULT_INJECTION: forcing a failure.
[  139.711820][ T6460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.711931][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.1.901 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  139.711964][ T6460] Tainted: [W]=WARN
[  139.711972][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  139.711990][ T6460] Call Trace:
[  139.712002][ T6460]  <TASK>
[  139.712011][ T6460]  __dump_stack+0x1d/0x30
[  139.712045][ T6460]  dump_stack_lvl+0x95/0xd0
[  139.712274][ T6460]  dump_stack+0x15/0x1b
[  139.712298][ T6460]  should_fail_ex+0x259/0x270
[  139.712337][ T6460]  should_fail+0xb/0x20
[  139.712468][ T6460]  should_fail_usercopy+0x1a/0x20
[  139.712500][ T6460]  _copy_from_user+0x1c/0xb0
[  139.712616][ T6460]  kstrtouint_from_user+0x69/0xf0
[  139.712648][ T6460]  ? 0xffffffff81000000
[  139.712667][ T6460]  ? avc_policy_seqno+0x15/0x30
[  139.712703][ T6460]  proc_fail_nth_write+0x50/0x160
[  139.712778][ T6460]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  139.712813][ T6460]  vfs_write+0x24f/0x990
[  139.712856][ T6460]  ? __fget_files+0x184/0x1c0
[  139.712957][ T6460]  ? mutex_lock+0x52/0x90
[  139.713066][ T6460]  ksys_write+0xdc/0x1a0
[  139.713112][ T6460]  __x64_sys_write+0x40/0x50
[  139.713215][ T6460]  x64_sys_call+0x154e/0x2550
[  139.713252][ T6460]  do_syscall_64+0x112/0x360
[  139.713396][ T6460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.713422][ T6460] RIP: 0033:0x7f7c1cd6034e
[  139.713438][ T6460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  139.713459][ T6460] RSP: 002b:00007f7c1b7eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.713485][ T6460] RAX: ffffffffffffffda RBX: 00007f7c1b7ef6c0 RCX: 00007f7c1cd6034e
[  139.713516][ T6460] RDX: 0000000000000001 RSI: 00007f7c1b7ef0a0 RDI: 0000000000000004
[  139.713529][ T6460] RBP: 00007f7c1b7ef090 R08: 0000000000000000 R09: 0000000000000000
[  139.713543][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.713556][ T6460] R13: 00007f7c1d026038 R14: 00007f7c1d025fa0 R15: 00007ffd91fafad8
[  139.713582][ T6460]  </TASK>
[  139.739005][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.918103][   T29] audit: type=1400 audit(1793881352.436:2150): avc:  denied  { getopt } for  pid=6462 comm="syz.1.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  140.031578][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  140.096969][   T29] audit: type=1400 audit(1793881352.616:2151): avc:  denied  { create } for  pid=6457 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  140.131553][   T29] audit: type=1400 audit(1793881352.646:2152): avc:  denied  { sys_module } for  pid=6472 comm="syz.0.906" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  140.169148][   T29] audit: type=1400 audit(1793881352.686:2153): avc:  denied  { block_suspend } for  pid=6457 comm="syz.4.900" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  140.210134][   T29] audit: type=1400 audit(1793881352.726:2154): avc:  denied  { append } for  pid=6480 comm="syz.3.907" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  140.214517][   T29] audit: type=1400 audit(1793881352.736:2156): avc:  denied  { write } for  pid=6472 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  140.257888][   T29] audit: type=1400 audit(1793881352.726:2155): avc:  denied  { open } for  pid=6480 comm="syz.3.907" path="/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  140.257925][   T29] audit: type=1400 audit(1793881352.776:2157): avc:  denied  { mount } for  pid=6472 comm="syz.0.906" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  140.378308][ T6487] loop4: detected capacity change from 0 to 512
[  140.398723][ T6487] bio_check_eod: 1637 callbacks suppressed
[  140.398743][ T6487] syz.4.910: attempt to access beyond end of device
[  140.398743][ T6487] loop4: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  140.399037][ T6487] syz.4.910: attempt to access beyond end of device
[  140.399037][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.399302][ T6487] syz.4.910: attempt to access beyond end of device
[  140.399302][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.399364][ T6487] syz.4.910: attempt to access beyond end of device
[  140.399364][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.399487][ T6487] syz.4.910: attempt to access beyond end of device
[  140.399487][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.399568][ T6487] syz.4.910: attempt to access beyond end of device
[  140.399568][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.399680][ T6487] syz.4.910: attempt to access beyond end of device
[  140.399680][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.399837][ T6487] syz.4.910: attempt to access beyond end of device
[  140.399837][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.399900][ T6487] syz.4.910: attempt to access beyond end of device
[  140.399900][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.403069][ T6487] syz.4.910: attempt to access beyond end of device
[  140.403069][ T6487] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  140.454158][ T6481] loop3: detected capacity change from 0 to 512
[  140.508273][ T6481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.508667][ T6481] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  140.678275][ T6496] loop4: detected capacity change from 0 to 128
[  140.696550][ T6496] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  140.697675][ T6496] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.563827][ T3655] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  142.220271][ T3292] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.249819][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.262775][ T6520] loop4: detected capacity change from 0 to 1024
[  142.293837][   T53] IPVS: starting estimator thread 0...
[  142.298746][ T6520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  142.298830][ T6520] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.330231][ T6524] bridge0: port 3(gretap0) entered blocking state
[  142.330385][ T6524] bridge0: port 3(gretap0) entered disabled state
[  142.331267][ T6524] gretap0: entered allmulticast mode
[  142.344463][ T6524] gretap0: entered promiscuous mode
[  142.344990][ T6524] bridge0: port 3(gretap0) entered blocking state
[  142.345293][ T6524] bridge0: port 3(gretap0) entered forwarding state
[  142.382215][ T6526] IPVS: using max 1632 ests per chain, 81600 per kthread
[  142.477910][ T6539] netlink: 180 bytes leftover after parsing attributes in process `syz.0.917'.
[  142.477974][ T6539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.917'.
[  142.671737][ T6547] netlink: 9 bytes leftover after parsing attributes in process `syz.3.924'.
[  142.760635][ T6550] loop3: detected capacity change from 0 to 128
[  142.780331][ T6550] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  142.781907][ T6550] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.888864][ T6550] erspan0: entered promiscuous mode
[  143.138053][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.349388][ T6572] FAULT_INJECTION: forcing a failure.
[  143.349388][ T6572] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.349505][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.2.931 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  143.349545][ T6572] Tainted: [W]=WARN
[  143.349555][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  143.349580][ T6572] Call Trace:
[  143.349587][ T6572]  <TASK>
[  143.349597][ T6572]  __dump_stack+0x1d/0x30
[  143.349692][ T6572]  dump_stack_lvl+0x95/0xd0
[  143.349787][ T6572]  dump_stack+0x15/0x1b
[  143.349827][ T6572]  should_fail_ex+0x259/0x270
[  143.349947][ T6572]  should_fail+0xb/0x20
[  143.349980][ T6572]  should_fail_usercopy+0x1a/0x20
[  143.350021][ T6572]  strncpy_from_user+0x27/0x250
[  143.350056][ T6572]  do_getname+0x59/0x1c0
[  143.350184][ T6572]  getname_flags+0x1d/0x30
[  143.350214][ T6572]  do_sys_openat2+0x6f/0x140
[  143.350305][ T6572]  __x64_sys_openat+0xf2/0x120
[  143.350334][ T6572]  x64_sys_call+0x1f72/0x2550
[  143.350427][ T6572]  do_syscall_64+0x112/0x360
[  143.350482][ T6572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.350514][ T6572] RIP: 0033:0x7f89fe81fb19
[  143.350537][ T6572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.350571][ T6572] RSP: 002b:00007f89fd26f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  143.350599][ T6572] RAX: ffffffffffffffda RBX: 00007f89feaa5fa0 RCX: 00007f89fe81fb19
[  143.350716][ T6572] RDX: 0000000000080001 RSI: 0000200000001300 RDI: ffffffffffffff9c
[  143.350736][ T6572] RBP: 00007f89fd26f090 R08: 0000000000000000 R09: 0000000000000000
[  143.350755][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.350772][ T6572] R13: 00007f89feaa6038 R14: 00007f89feaa5fa0 R15: 00007ffcfb905e08
[  143.350800][ T6572]  </TASK>
[  143.487990][ T6574] loop2: detected capacity change from 0 to 1024
[  143.497910][ T6574] EXT4-fs: Ignoring removed nobh option
[  143.498326][ T6574] EXT4-fs: Ignoring removed nobh option
[  143.536456][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.585504][ T6574] netlink: 'syz.2.932': attribute type 8 has an invalid length.
[  143.617778][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.646082][ T6580] netlink: 'syz.2.934': attribute type 3 has an invalid length.
[  143.646104][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'.
[  143.986876][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'.
[  144.284701][ T6594] loop2: detected capacity change from 0 to 128
[  144.304249][ T6594] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  144.304767][ T6594] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.313700][ T6590] pimreg9: entered allmulticast mode
[  144.445160][ T6594] erspan0: entered promiscuous mode
[  144.529831][ T6349] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  144.546248][ T6601] loop0: detected capacity change from 0 to 128
[  144.552815][ T6601] vfat: Unknown parameter 'vfat'
[  144.579657][   T29] kauditd_printk_skb: 57 callbacks suppressed
[  144.579679][   T29] audit: type=1400 audit(1793881357.096:2215): avc:  denied  { mmap_zero } for  pid=6600 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  144.588951][   T29] audit: type=1400 audit(1793881357.106:2216): avc:  denied  { create } for  pid=6600 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  144.593674][   T29] audit: type=1400 audit(1793881357.116:2217): avc:  denied  { create } for  pid=6600 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  144.596145][   T29] audit: type=1400 audit(1793881357.116:2218): avc:  denied  { setopt } for  pid=6600 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  144.607992][   T29] audit: type=1400 audit(1793881357.126:2219): avc:  denied  { connect } for  pid=6600 comm="syz.0.943" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  144.615035][   T29] audit: type=1400 audit(1793881357.136:2220): avc:  denied  { write } for  pid=6600 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  144.617654][   T29] audit: type=1400 audit(1793881357.136:2221): avc:  denied  { mount } for  pid=6600 comm="syz.0.943" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  144.659565][   T29] audit: type=1400 audit(1793881357.176:2222): avc:  denied  { unmount } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  144.678780][ T6599] loop1: detected capacity change from 0 to 128
[  144.707798][   T29] audit: type=1400 audit(1793881357.226:2223): avc:  denied  { mount } for  pid=6598 comm="syz.1.942" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  144.788730][   T29] audit: type=1400 audit(1793881357.306:2224): avc:  denied  { allowed } for  pid=6602 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  144.863586][ T6603] loop0: detected capacity change from 0 to 1024
[  144.870968][ T6603] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  144.880127][ T6603] JBD2: no valid journal superblock found
[  144.880253][ T6603] EXT4-fs (loop0): Could not load journal inode
[  144.929152][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  144.982739][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.009686][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.009723][ T6608] FAT-fs (loop1): Filesystem has been set read-only
[  145.009749][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.009803][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.009856][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.009939][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.009969][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.009991][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.010013][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.010114][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.010202][ T6608] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  145.114018][ T6611] loop2: detected capacity change from 0 to 256
[  145.120290][ T6611] vfat: Unknown parameter 'uni_xrrors'
[  145.141556][ T6599] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  145.241738][ T6614] loop3: detected capacity change from 0 to 128
[  145.244492][ T6614] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  145.251040][ T6614] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.551771][ T6625] loop3: detected capacity change from 0 to 512
[  145.565590][ T6625] EXT4-fs: Ignoring removed orlov option
[  145.565612][ T6625] EXT4-fs: Ignoring removed nobh option
[  145.565724][ T6625] EXT4-fs: Ignoring removed nomblk_io_submit option
[  145.565832][ T6625] EXT4-fs: Ignoring removed bh option
[  146.234111][ T6625] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  146.234493][ T6625] EXT4-fs (loop3): 1 orphan inode deleted
[  146.234860][ T6625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.373765][ T6637] FAULT_INJECTION: forcing a failure.
[  146.373765][ T6637] name failslab, interval 1, probability 0, space 0, times 0
[  146.373851][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.2.953 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  146.373882][ T6637] Tainted: [W]=WARN
[  146.373892][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  146.373910][ T6637] Call Trace:
[  146.373920][ T6637]  <TASK>
[  146.373981][ T6637]  __dump_stack+0x1d/0x30
[  146.374019][ T6637]  dump_stack_lvl+0x95/0xd0
[  146.374051][ T6637]  dump_stack+0x15/0x1b
[  146.374138][ T6637]  should_fail_ex+0x259/0x270
[  146.374178][ T6637]  ? security_inode_alloc+0x37/0x100
[  146.374226][ T6637]  should_failslab+0x8c/0xb0
[  146.374400][ T6637]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  146.374433][ T6637]  ? security_inode_alloc+0x37/0x100
[  146.374473][ T6637]  security_inode_alloc+0x37/0x100
[  146.374539][ T6637]  inode_init_always_gfp+0x49b/0x4e0
[  146.374578][ T6637]  ? __pfx_proc_alloc_inode+0x10/0x10
[  146.374615][ T6637]  alloc_inode+0x58/0x170
[  146.374646][ T6637]  new_inode+0x1d/0xe0
[  146.374676][ T6637]  proc_pid_make_inode+0x24/0x200
[  146.374747][ T6637]  proc_pident_instantiate+0x44/0x180
[  146.374867][ T6637]  proc_pident_lookup+0x115/0x1a0
[  146.374983][ T6637]  proc_tid_base_lookup+0x2b/0x40
[  146.375113][ T6637]  __lookup_slow+0x155/0x200
[  146.375151][ T6637]  lookup_slow+0x42/0x60
[  146.375189][ T6637]  link_path_walk+0x925/0xde0
[  146.375291][ T6637]  path_openat+0x142/0x11c0
[  146.375339][ T6637]  do_file_open+0x16c/0x290
[  146.375436][ T6637]  ? __pfx_kfree_link+0x10/0x10
[  146.375497][ T6637]  do_sys_openat2+0xa1/0x140
[  146.375551][ T6637]  __x64_sys_openat+0xf2/0x120
[  146.375582][ T6637]  x64_sys_call+0x1f72/0x2550
[  146.375612][ T6637]  do_syscall_64+0x112/0x360
[  146.375661][ T6637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.375730][ T6637] RIP: 0033:0x7f89fe7e034e
[  146.375753][ T6637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  146.375781][ T6637] RSP: 002b:00007f89fd26eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  146.375810][ T6637] RAX: ffffffffffffffda RBX: 00007f89fd26f6c0 RCX: 00007f89fe7e034e
[  146.375830][ T6637] RDX: 0000000000000002 RSI: 00007f89fd26ef90 RDI: ffffffffffffff9c
[  146.375851][ T6637] RBP: 00007f89fe8b7b70 R08: 0000000000000000 R09: 0000000000000000
[  146.375879][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.375897][ T6637] R13: 00007f89feaa6038 R14: 00007f89feaa5fa0 R15: 00007ffcfb905e08
[  146.375926][ T6637]  </TASK>
[  146.378520][ T6637] random: crng reseeded on system resumption
[  146.482504][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.582904][ T6642] loop3: detected capacity change from 0 to 256
[  146.679281][ T6644] loop4: detected capacity change from 0 to 1024
[  146.688554][ T6644] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  146.690031][ T6644] JBD2: no valid journal superblock found
[  146.690116][ T6644] EXT4-fs (loop4): Could not load journal inode
[  146.736656][ T6646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  146.736813][ T6646] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.941481][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'.
[  147.092075][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  147.509559][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  147.585740][ T6662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  147.585965][ T6662] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.653949][ T6666] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  147.654888][ T6666] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.927565][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'.
[  147.965410][ T6676] bond0: (slave bond_slave_1): Releasing backup interface
[  148.136571][ T6689] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  148.136769][ T6689] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.160989][ T6689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.972'.
[  148.161051][ T6689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.972'.
[  148.218315][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'.
[  148.252567][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.512894][ T3292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  148.551374][   T32] Bluetooth: hci0: Frame reassembly failed (-84)
[  148.964447][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.978995][ T6707] set_capacity_and_notify: 5 callbacks suppressed
[  148.979043][ T6707] loop0: detected capacity change from 0 to 512
[  149.005551][ T6707] bio_check_eod: 451 callbacks suppressed
[  149.005573][ T6707] syz.0.977: attempt to access beyond end of device
[  149.005573][ T6707] loop0: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  149.005926][ T6707] syz.0.977: attempt to access beyond end of device
[  149.005926][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.005993][ T6707] syz.0.977: attempt to access beyond end of device
[  149.005993][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.006094][ T6707] syz.0.977: attempt to access beyond end of device
[  149.006094][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.006143][ T6707] syz.0.977: attempt to access beyond end of device
[  149.006143][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.006211][ T6707] syz.0.977: attempt to access beyond end of device
[  149.006211][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.006293][ T6707] syz.0.977: attempt to access beyond end of device
[  149.006293][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.006356][ T6707] syz.0.977: attempt to access beyond end of device
[  149.006356][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.006434][ T6707] syz.0.977: attempt to access beyond end of device
[  149.006434][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.006533][ T6707] syz.0.977: attempt to access beyond end of device
[  149.006533][ T6707] loop0: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  149.236656][   T32] Bluetooth: hci1: Frame reassembly failed (-84)
[  149.239744][ T6717] FAULT_INJECTION: forcing a failure.
[  149.239744][ T6717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.239784][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.0.981 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  149.239838][ T6717] Tainted: [W]=WARN
[  149.239848][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  149.239866][ T6717] Call Trace:
[  149.239876][ T6717]  <TASK>
[  149.239888][ T6717]  __dump_stack+0x1d/0x30
[  149.239925][ T6717]  dump_stack_lvl+0x95/0xd0
[  149.240031][ T6717]  dump_stack+0x15/0x1b
[  149.240060][ T6717]  should_fail_ex+0x259/0x270
[  149.240100][ T6717]  should_fail+0xb/0x20
[  149.240135][ T6717]  should_fail_usercopy+0x1a/0x20
[  149.240213][ T6717]  _copy_from_user+0x1c/0xb0
[  149.240253][ T6717]  do_sock_getsockopt+0x122/0x350
[  149.240402][ T6717]  __x64_sys_getsockopt+0x11d/0x1a0
[  149.240434][ T6717]  x64_sys_call+0x1032/0x2550
[  149.240591][ T6717]  do_syscall_64+0x112/0x360
[  149.240651][ T6717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.240704][ T6717] RIP: 0033:0x7f619ca3fb19
[  149.240721][ T6717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.240745][ T6717] RSP: 002b:00007f619b48f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  149.240772][ T6717] RAX: ffffffffffffffda RBX: 00007f619ccc5fa0 RCX: 00007f619ca3fb19
[  149.240829][ T6717] RDX: 0000000000000006 RSI: 0000000000000084 RDI: 0000000000000003
[  149.240846][ T6717] RBP: 00007f619b48f090 R08: 00002000000005c0 R09: 0000000000000000
[  149.240865][ T6717] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001
[  149.240883][ T6717] R13: 00007f619ccc6038 R14: 00007f619ccc5fa0 R15: 00007fff0d516f48
[  149.240910][ T6717]  </TASK>
[  149.367601][ T6722] loop0: detected capacity change from 0 to 512
[  149.406794][ T6722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.407101][ T6722] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  149.568115][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.890542][   T29] kauditd_printk_skb: 66 callbacks suppressed
[  149.890639][   T29] audit: type=1400 audit(1793881362.406:2291): avc:  denied  { write } for  pid=6740 comm="syz.1.988" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  149.898092][   T29] audit: type=1400 audit(1793881362.416:2292): avc:  denied  { create } for  pid=6742 comm="syz.3.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.900878][   T29] audit: type=1400 audit(1793881362.416:2293): avc:  denied  { setopt } for  pid=6742 comm="syz.3.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.905609][   T29] audit: type=1400 audit(1793881362.426:2294): avc:  denied  { lock } for  pid=6742 comm="syz.3.989" path="socket:[15137]" dev="sockfs" ino=15137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.907358][   T29] audit: type=1400 audit(1793881362.426:2295): avc:  denied  { bind } for  pid=6742 comm="syz.3.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.943677][ T6743] loop3: detected capacity change from 0 to 512
[  149.978184][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.978381][ T6743] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.999795][   T29] audit: type=1400 audit(1793881362.516:2296): avc:  denied  { write } for  pid=6742 comm="syz.3.989" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  149.999897][   T29] audit: type=1400 audit(1793881362.516:2297): avc:  denied  { write } for  pid=6742 comm="syz.3.989" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.000051][   T29] audit: type=1400 audit(1793881362.516:2298): avc:  denied  { remove_name } for  pid=6742 comm="syz.3.989" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.000207][   T29] audit: type=1400 audit(1793881362.516:2299): avc:  denied  { rename } for  pid=6742 comm="syz.3.989" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  150.000295][   T29] audit: type=1400 audit(1793881362.516:2300): avc:  denied  { unlink } for  pid=6742 comm="syz.3.989" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  150.652081][ T3655] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  150.857717][ T6757] loop0: detected capacity change from 0 to 512
[  150.914708][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.114970][ T6766] loop1: detected capacity change from 0 to 128
[  151.120876][ T6766] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.122083][ T6766] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.215825][ T6774] netlink: 'syz.1.998': attribute type 3 has an invalid length.
[  151.215852][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'.
[  151.230760][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'.
[  151.248096][ T3511] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  151.309502][ T6778] loop0: detected capacity change from 0 to 512
[  151.559042][ T6790] tipc: Can't bind to reserved service type 1
[  151.602384][ T6794] FAULT_INJECTION: forcing a failure.
[  151.602384][ T6794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.602429][ T6794] CPU: 1 UID: 0 PID: 6794 Comm: syz.0.1005 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  151.602518][ T6794] Tainted: [W]=WARN
[  151.602526][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  151.602541][ T6794] Call Trace:
[  151.602548][ T6794]  <TASK>
[  151.602556][ T6794]  __dump_stack+0x1d/0x30
[  151.602588][ T6794]  dump_stack_lvl+0x95/0xd0
[  151.602633][ T6794]  dump_stack+0x15/0x1b
[  151.602695][ T6794]  should_fail_ex+0x259/0x270
[  151.602733][ T6794]  should_fail+0xb/0x20
[  151.602762][ T6794]  should_fail_usercopy+0x1a/0x20
[  151.602829][ T6794]  _copy_from_iter+0xcc/0xe80
[  151.602867][ T6794]  ? __alloc_skb+0x516/0x6f0
[  151.602906][ T6794]  ? __alloc_skb+0x209/0x6f0
[  151.602979][ T6794]  netlink_sendmsg+0x4d6/0x740
[  151.603028][ T6794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.603054][ T6794]  __sys_sendto+0x429/0x480
[  151.603108][ T6794]  __x64_sys_sendto+0x76/0x90
[  151.603152][ T6794]  x64_sys_call+0x200c/0x2550
[  151.603233][ T6794]  do_syscall_64+0x112/0x360
[  151.603276][ T6794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.603309][ T6794] RIP: 0033:0x7f619ca3fb19
[  151.603330][ T6794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.603389][ T6794] RSP: 002b:00007f619b48f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  151.603481][ T6794] RAX: ffffffffffffffda RBX: 00007f619ccc5fa0 RCX: 00007f619ca3fb19
[  151.603500][ T6794] RDX: 0000000000000078 RSI: 0000200000000200 RDI: 0000000000000003
[  151.603517][ T6794] RBP: 00007f619b48f090 R08: 0000000000000000 R09: 0000000000000000
[  151.603534][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.603551][ T6794] R13: 00007f619ccc6038 R14: 00007f619ccc5fa0 R15: 00007fff0d516f48
[  151.603654][ T6794]  </TASK>
[  151.667071][ T6790] loop1: detected capacity change from 0 to 2048
[  151.709697][ T6790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.860227][ T6800] loop0: detected capacity change from 0 to 512
[  152.428939][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.444235][  T346] Bluetooth: hci0: Frame reassembly failed (-84)
[  152.488575][ T6811] loop2: detected capacity change from 0 to 128
[  152.507378][ T6811] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  152.509227][ T6811] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  152.833233][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'.
[  152.847581][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'.
[  152.848549][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'.
[  152.849525][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'.
[  152.998534][ T6851] FAULT_INJECTION: forcing a failure.
[  152.998534][ T6851] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.998584][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.0.1023 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  152.998624][ T6851] Tainted: [W]=WARN
[  152.998634][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  152.998652][ T6851] Call Trace:
[  152.998662][ T6851]  <TASK>
[  152.998708][ T6851]  __dump_stack+0x1d/0x30
[  152.998743][ T6851]  dump_stack_lvl+0x95/0xd0
[  152.998783][ T6851]  dump_stack+0x15/0x1b
[  152.998816][ T6851]  should_fail_ex+0x259/0x270
[  152.998854][ T6851]  should_fail+0xb/0x20
[  152.998897][ T6851]  should_fail_usercopy+0x1a/0x20
[  152.998945][ T6851]  _copy_from_user+0x1c/0xb0
[  152.999023][ T6851]  do_fcntl+0x51c/0xfa0
[  152.999063][ T6851]  __se_sys_fcntl+0xb1/0x120
[  152.999095][ T6851]  __x64_sys_fcntl+0x43/0x50
[  152.999187][ T6851]  x64_sys_call+0x1a43/0x2550
[  152.999225][ T6851]  do_syscall_64+0x112/0x360
[  152.999271][ T6851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.999373][ T6851] RIP: 0033:0x7f619ca3fb19
[  152.999394][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.999420][ T6851] RSP: 002b:00007f619b48f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  152.999447][ T6851] RAX: ffffffffffffffda RBX: 00007f619ccc5fa0 RCX: 00007f619ca3fb19
[  152.999464][ T6851] RDX: 00002000000000c0 RSI: 0000000000000024 RDI: 0000000000000003
[  152.999477][ T6851] RBP: 00007f619b48f090 R08: 0000000000000000 R09: 0000000000000000
[  152.999498][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.999515][ T6851] R13: 00007f619ccc6038 R14: 00007f619ccc5fa0 R15: 00007fff0d516f48
[  152.999658][ T6851]  </TASK>
[  153.323738][ T6858] loop4: detected capacity change from 0 to 256
[  153.503487][ T6862] FAULT_INJECTION: forcing a failure.
[  153.503487][ T6862] name failslab, interval 1, probability 0, space 0, times 0
[  153.503741][ T6862] CPU: 0 UID: 0 PID: 6862 Comm: syz.1.1028 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  153.503777][ T6862] Tainted: [W]=WARN
[  153.503884][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  153.503902][ T6862] Call Trace:
[  153.503912][ T6862]  <TASK>
[  153.503926][ T6862]  __dump_stack+0x1d/0x30
[  153.503955][ T6862]  dump_stack_lvl+0x95/0xd0
[  153.503985][ T6862]  dump_stack+0x15/0x1b
[  153.504094][ T6862]  should_fail_ex+0x259/0x270
[  153.504138][ T6862]  ? kernfs_fop_write_iter+0xd4/0x2e0
[  153.504178][ T6862]  should_failslab+0x8c/0xb0
[  153.504261][ T6862]  __kmalloc_noprof+0xb6/0x4b0
[  153.504294][ T6862]  ? kernfs_fop_write_iter+0xd4/0x2e0
[  153.504327][ T6862]  kernfs_fop_write_iter+0xd4/0x2e0
[  153.504389][ T6862]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  153.504419][ T6862]  vfs_write+0x57a/0x990
[  153.504519][ T6862]  ksys_write+0xdc/0x1a0
[  153.504555][ T6862]  __x64_sys_write+0x40/0x50
[  153.504665][ T6862]  x64_sys_call+0x154e/0x2550
[  153.504695][ T6862]  do_syscall_64+0x112/0x360
[  153.504787][ T6862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.504814][ T6862] RIP: 0033:0x7f7c1cd9fb19
[  153.504830][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.504919][ T6862] RSP: 002b:00007f7c1b7ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  153.504945][ T6862] RAX: ffffffffffffffda RBX: 00007f7c1d025fa0 RCX: 00007f7c1cd9fb19
[  153.504965][ T6862] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006
[  153.505051][ T6862] RBP: 00007f7c1b7ef090 R08: 0000000000000000 R09: 0000000000000000
[  153.505065][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.505077][ T6862] R13: 00007f7c1d026038 R14: 00007f7c1d025fa0 R15: 00007ffd91fafad8
[  153.505168][ T6862]  </TASK>
[  153.544073][ T3292] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  153.544103][ T3292] FAT-fs (loop4): Filesystem has been set read-only
[  153.546038][ T3292] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  153.584195][ T6864] EXT4-fs: Ignoring removed orlov option
[  153.584274][ T6864] EXT4-fs: Ignoring removed nobh option
[  153.584501][ T6864] EXT4-fs: Ignoring removed nomblk_io_submit option
[  153.586608][ T6864] EXT4-fs: Ignoring removed bh option
[  153.589031][ T6864] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  153.589882][ T6864] EXT4-fs (loop1): 1 orphan inode deleted
[  153.590808][ T6864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.746038][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.811746][   T54] bridge_slave_1: left allmulticast mode
[  153.811768][   T54] bridge_slave_1: left promiscuous mode
[  153.811912][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.832162][   T54] bridge_slave_0: left allmulticast mode
[  153.832566][   T54] bridge_slave_0: left promiscuous mode
[  153.832703][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.974813][   T54] team0: Port device bridge0 removed
[  153.985182][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.998782][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.012316][   T54] bond0 (unregistering): Released all slaves
[  154.213201][   T54] hsr_slave_0: left promiscuous mode
[  154.213769][   T54] hsr_slave_1: left promiscuous mode
[  154.214794][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.214811][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.215323][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.215341][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.219048][   T54] veth1_macvtap: left promiscuous mode
[  154.219078][   T54] veth0_macvtap: left promiscuous mode
[  154.219172][   T54] veth1_vlan: left promiscuous mode
[  154.219214][   T54] veth0_vlan: left promiscuous mode
[  154.344589][   T54] team0 (unregistering): Port device team_slave_1 removed
[  154.348101][   T54] team0 (unregistering): Port device team_slave_0 removed
[  154.458971][ T6889] rxe_eth0 speed is unknown, defaulting to 1000
[  154.496313][ T6889] ip6gre0 speed is unknown, defaulting to 1000
[  154.522157][ T3689] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  154.634473][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.634504][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.634605][ T6889] bridge_slave_0: entered allmulticast mode
[  154.635235][ T6889] bridge_slave_0: entered promiscuous mode
[  154.637416][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.637520][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.637712][ T6889] bridge_slave_1: entered allmulticast mode
[  154.639182][ T6889] bridge_slave_1: entered promiscuous mode
[  154.669385][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.673330][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.706877][ T6889] team0: Port device team_slave_0 added
[  154.712317][ T6889] team0: Port device team_slave_1 added
[  154.728396][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.728416][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.728453][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.729342][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.729358][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.729391][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.758757][ T6908] set_capacity_and_notify: 1 callbacks suppressed
[  154.758816][ T6908] loop1: detected capacity change from 0 to 512
[  154.761205][ T6908] EXT4-fs: Ignoring removed orlov option
[  154.761295][ T6908] EXT4-fs: Ignoring removed nobh option
[  154.761534][ T6908] EXT4-fs: Ignoring removed nomblk_io_submit option
[  154.761661][ T6908] EXT4-fs: Ignoring removed bh option
[  154.776439][ T6908] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  154.777878][ T6908] EXT4-fs (loop1): 1 orphan inode deleted
[  154.779033][ T6908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.796454][ T6889] hsr_slave_0: entered promiscuous mode
[  154.797615][ T6889] hsr_slave_1: entered promiscuous mode
[  154.799778][ T6889] debugfs: 'hsr0' already exists in 'hsr'
[  154.799825][ T6889] Cannot create hsr debugfs directory
[  154.857043][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.937065][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  154.937130][   T29] audit: type=1326 audit(1793881367.456:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1cd9fb19 code=0x7ffc0000
[  154.937166][   T29] audit: type=1326 audit(1793881367.456:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1cd9fb19 code=0x7ffc0000
[  155.028525][ T6915] loop2: detected capacity change from 0 to 512
[  155.048911][ T6915] bio_check_eod: 2238 callbacks suppressed
[  155.048954][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.048954][ T6915] loop2: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  155.049401][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.049401][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.049507][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.049507][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.049555][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.049555][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.049655][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.049655][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.049765][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.049765][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.049835][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.049835][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.049963][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.049963][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.050028][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.050028][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.050198][ T6915] syz.2.1045: attempt to access beyond end of device
[  155.050198][ T6915] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  155.150684][ T6917] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1044'.
[  155.229739][ T6889] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  155.249923][ T6889] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  155.254172][ T6889] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  155.268265][ T6889] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  155.270998][ T6889] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  155.291007][ T6889] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  155.292566][ T6889] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  155.311397][ T6889] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  155.318861][ T6920] loop0: detected capacity change from 0 to 512
[  155.357553][ T6917] loop1: detected capacity change from 0 to 512
[  155.382044][ T6917] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  155.382111][ T6930] FAULT_INJECTION: forcing a failure.
[  155.382111][ T6930] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.382269][ T6930] CPU: 1 UID: 0 PID: 6930 Comm: syz.3.1048 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  155.382336][ T6930] Tainted: [W]=WARN
[  155.382346][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  155.382365][ T6930] Call Trace:
[  155.382374][ T6930]  <TASK>
[  155.382385][ T6930]  __dump_stack+0x1d/0x30
[  155.382486][ T6930]  dump_stack_lvl+0x95/0xd0
[  155.382520][ T6930]  dump_stack+0x15/0x1b
[  155.382544][ T6930]  should_fail_ex+0x259/0x270
[  155.382586][ T6930]  should_fail+0xb/0x20
[  155.382699][ T6930]  should_fail_usercopy+0x1a/0x20
[  155.382744][ T6930]  _copy_from_user+0x1c/0xb0
[  155.382802][ T6930]  ___sys_sendmsg+0xc1/0x1e0
[  155.382841][ T6930]  __x64_sys_sendmsg+0xd4/0x160
[  155.382877][ T6930]  x64_sys_call+0x22ab/0x2550
[  155.382926][ T6930]  do_syscall_64+0x112/0x360
[  155.383032][ T6930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.383060][ T6930] RIP: 0033:0x7f2cfb39fb19
[  155.383079][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.383142][ T6930] RSP: 002b:00007f2cf9def028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.383166][ T6930] RAX: ffffffffffffffda RBX: 00007f2cfb625fa0 RCX: 00007f2cfb39fb19
[  155.383184][ T6930] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003
[  155.383199][ T6930] RBP: 00007f2cf9def090 R08: 0000000000000000 R09: 0000000000000000
[  155.383215][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.383230][ T6930] R13: 00007f2cfb626038 R14: 00007f2cfb625fa0 R15: 00007ffd713bf3b8
[  155.383311][ T6930]  </TASK>
[  155.588488][ T6938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1050'.
[  155.598464][ T6917] EXT4-fs (loop1): 1 orphan inode deleted
[  155.599560][ T6917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.600125][ T6917] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.622420][   T54] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  155.622506][   T54] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1
[  155.648319][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.673169][ T6889] 8021q: adding VLAN 0 to HW filter on device team0
[  155.677988][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.678032][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.689248][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.689355][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.776144][ T6944] loop0: detected capacity change from 0 to 512
[  155.780089][ T6944] EXT4-fs: Ignoring removed orlov option
[  155.780163][ T6944] EXT4-fs: Ignoring removed nobh option
[  155.784670][ T6944] EXT4-fs: Ignoring removed nomblk_io_submit option
[  155.784725][ T6944] EXT4-fs: Ignoring removed bh option
[  155.810684][ T6944] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  155.814420][ T6944] EXT4-fs (loop0): 1 orphan inode deleted
[  155.818241][ T6944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.875045][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.929247][   T29] audit: type=1400 audit(1793881368.446:2333): avc:  denied  { read } for  pid=6953 comm="syz.0.1053" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  155.929358][   T29] audit: type=1400 audit(1793881368.446:2334): avc:  denied  { open } for  pid=6953 comm="syz.0.1053" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  155.997510][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.025948][   T32] Bluetooth: hci0: Frame reassembly failed (-84)
[  156.064254][   T29] audit: type=1326 audit(1793881368.586:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.1054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1cd9fb19 code=0x7ffc0000
[  156.212097][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.553797][ T3655] Bluetooth: hci1: sending frame failed (-49)
[  156.553839][ T3689] Bluetooth: hci1: Opcode 0x1003 failed: -49
[  156.837682][ T6889] veth0_vlan: entered promiscuous mode
[  156.840249][ T6889] veth1_vlan: entered promiscuous mode
[  156.868930][ T6889] veth0_macvtap: entered promiscuous mode
[  156.871163][ T6889] veth1_macvtap: entered promiscuous mode
[  156.889510][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.903685][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.938043][   T29] audit: type=1400 audit(1793881369.456:2336): avc:  denied  { mounton } for  pid=6889 comm="syz-executor" path="/root/syzkaller.GGL34R/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  156.939453][   T29] audit: type=1400 audit(1793881369.456:2337): avc:  denied  { mounton } for  pid=6889 comm="syz-executor" path="/root/syzkaller.GGL34R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  156.964715][   T54] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.964852][   T54] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.965075][   T54] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.965120][   T54] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.033036][   T29] audit: type=1400 audit(1793881369.556:2338): avc:  denied  { mounton } for  pid=6889 comm="syz-executor" path="/root/syzkaller.GGL34R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  157.035882][   T29] audit: type=1400 audit(1793881369.556:2339): avc:  denied  { mounton } for  pid=6889 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  157.163671][ T6995] loop7: detected capacity change from 0 to 7
[  157.301383][ T6996] tap0: tun_chr_ioctl cmd 1074025675
[  157.301408][ T6996] tap0: persist enabled
[  157.301551][ T6996] tap0: tun_chr_ioctl cmd 1074025675
[  157.301566][ T6996] tap0: persist enabled
[  157.301831][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'.
[  157.337825][ T6996] bond0: (slave bond_slave_1): Releasing backup interface
[  157.780142][ T6999] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1059'.
[  157.780191][ T6999] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1059'.
[  157.805149][ T7003] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1059'.
[  157.887758][ T7007] loop1: detected capacity change from 0 to 512
[  157.909586][ T7007] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #11: comm syz.1.1060: invalid indirect mapped block 256 (level 2)
[  157.909630][ T7007] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.910102][ T7007] EXT4-fs (loop1): 2 truncates cleaned up
[  157.910434][ T7007] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.998396][   T53] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[  157.998677][   T53] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  157.998782][   T53] EXT4-fs (loop1): This should not happen!! Data will be lost
[  157.998782][   T53] 
[  157.998796][   T53] EXT4-fs (loop1): Total free blocks count 0
[  157.998810][   T53] EXT4-fs (loop1): Free/Dirty block details
[  157.998825][   T53] EXT4-fs (loop1): free_blocks=0
[  157.998842][   T53] EXT4-fs (loop1): dirty_blocks=1
[  157.998888][   T53] EXT4-fs (loop1): Block reservation details
[  157.998900][   T53] EXT4-fs (loop1): i_reserved_data_blocks=1
[  157.999991][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  158.043617][ T3689] Bluetooth: hci0: command 0x1003 tx timeout
[  158.043648][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  158.110294][ T7012] loop0: detected capacity change from 0 to 512
[  158.115254][ T7012] EXT4-fs: Ignoring removed orlov option
[  158.115385][ T7012] EXT4-fs: Ignoring removed nobh option
[  158.115546][ T7012] EXT4-fs: Ignoring removed nomblk_io_submit option
[  158.115622][ T7012] EXT4-fs: Ignoring removed bh option
[  158.120622][ T7013] __nla_validate_parse: 1 callbacks suppressed
[  158.120749][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1061'.
[  158.148748][ T7012] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  158.155141][ T7012] EXT4-fs (loop0): 1 orphan inode deleted
[  158.156148][ T7012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.204565][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.311061][ T7020] netlink: 'syz.0.1065': attribute type 3 has an invalid length.
[  158.311138][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'.
[  158.323925][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'.
[  158.351840][ T7022] FAULT_INJECTION: forcing a failure.
[  158.351840][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.351879][ T7022] CPU: 0 UID: 0 PID: 7022 Comm: syz.0.1066 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  158.351917][ T7022] Tainted: [W]=WARN
[  158.351926][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  158.351982][ T7022] Call Trace:
[  158.351993][ T7022]  <TASK>
[  158.352002][ T7022]  __dump_stack+0x1d/0x30
[  158.352037][ T7022]  dump_stack_lvl+0x95/0xd0
[  158.352067][ T7022]  dump_stack+0x15/0x1b
[  158.352095][ T7022]  should_fail_ex+0x259/0x270
[  158.352158][ T7022]  should_fail+0xb/0x20
[  158.352191][ T7022]  should_fail_usercopy+0x1a/0x20
[  158.352267][ T7022]  _copy_to_user+0x20/0xa0
[  158.352313][ T7022]  simple_read_from_buffer+0xb5/0x130
[  158.352390][ T7022]  proc_fail_nth_read+0x10e/0x150
[  158.352423][ T7022]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.352491][ T7022]  vfs_read+0x18e/0x7c0
[  158.352531][ T7022]  ? __rcu_read_unlock+0x4e/0x70
[  158.352635][ T7022]  ? __fget_files+0x184/0x1c0
[  158.352667][ T7022]  ? mutex_lock+0x52/0x90
[  158.352740][ T7022]  ksys_read+0xdc/0x1a0
[  158.352781][ T7022]  __x64_sys_read+0x40/0x50
[  158.352822][ T7022]  x64_sys_call+0x2135/0x2550
[  158.352994][ T7022]  do_syscall_64+0x112/0x360
[  158.353088][ T7022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.353116][ T7022] RIP: 0033:0x7f619ca0034e
[  158.353137][ T7022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  158.353163][ T7022] RSP: 002b:00007f619b48efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  158.353189][ T7022] RAX: ffffffffffffffda RBX: 00007f619b48f6c0 RCX: 00007f619ca0034e
[  158.353240][ T7022] RDX: 000000000000000f RSI: 00007f619b48f0a0 RDI: 0000000000000004
[  158.353257][ T7022] RBP: 00007f619b48f090 R08: 0000000000000000 R09: 0000000000000000
[  158.353273][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.353290][ T7022] R13: 00007f619ccc6038 R14: 00007f619ccc5fa0 R15: 00007fff0d516f48
[  158.353325][ T7022]  </TASK>
[  158.732556][ T7031] loop3: detected capacity change from 0 to 512
[  158.821693][ T7032] loop0: detected capacity change from 0 to 512
[  158.825980][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.826244][ T7031] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.466852][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1071'.
[  159.733197][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.087611][ T7048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1073'.
[  160.087885][ T7048] bridge_slave_0: entered promiscuous mode
[  160.110375][ T7047] bridge_slave_0: left promiscuous mode
[  160.135800][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  160.135820][   T29] audit: type=1400 audit(1793881372.656:2351): avc:  denied  { ioctl } for  pid=7051 comm="syz.3.1072" path="socket:[16930]" dev="sockfs" ino=16930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  160.135860][   T29] audit: type=1400 audit(1793881372.656:2352): avc:  denied  { connect } for  pid=7051 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  160.136042][   T29] audit: type=1400 audit(1793881372.656:2353): avc:  denied  { write } for  pid=7051 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  160.193139][   T29] audit: type=1400 audit(1793881372.696:2354): avc:  denied  { read write } for  pid=7051 comm="syz.3.1072" name="md0" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  160.193172][   T29] audit: type=1400 audit(1793881372.696:2355): avc:  denied  { open } for  pid=7051 comm="syz.3.1072" path="/187/md0" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  160.196865][ T7052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  160.196908][ T7052] block device autoloading is deprecated and will be removed.
[  160.212734][   T29] audit: type=1400 audit(1793881372.716:2356): avc:  denied  { ioctl } for  pid=7051 comm="syz.3.1072" path="/187/md0" dev="tmpfs" ino=1069 ioctlcmd=0x40480923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  160.327289][ T7060] netlink: 'syz.0.1075': attribute type 3 has an invalid length.
[  160.327361][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  160.327728][ T7060] tmpfs: Bad value for 'mpol'
[  160.327760][   T29] audit: type=1400 audit(1793881372.846:2357): avc:  denied  { mounton } for  pid=7058 comm="syz.0.1075" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  160.434470][   T29] audit: type=1400 audit(1793881372.956:2358): avc:  denied  { mounton } for  pid=7051 comm="syz.3.1072" path="/187/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  160.462090][ T7056] md: md3 stopped.
[  160.510975][   T29] audit: type=1400 audit(1793881373.026:2359): avc:  denied  { write } for  pid=7061 comm="syz.5.1076" name="dynamic_events" dev="tracefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  160.598903][   T29] audit: type=1400 audit(1793881373.116:2360): avc:  denied  { mounton } for  pid=7061 comm="syz.5.1076" path="/3/sys" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  161.438141][ T7077] loop5: detected capacity change from 0 to 128
[  161.548790][ T7077] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.553480][ T7077] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  161.582328][ T7095] FAULT_INJECTION: forcing a failure.
[  161.582328][ T7095] name failslab, interval 1, probability 0, space 0, times 0
[  161.582377][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.2.1084 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  161.582419][ T7095] Tainted: [W]=WARN
[  161.582428][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  161.582444][ T7095] Call Trace:
[  161.582451][ T7095]  <TASK>
[  161.582461][ T7095]  __dump_stack+0x1d/0x30
[  161.582569][ T7095]  dump_stack_lvl+0x95/0xd0
[  161.582603][ T7095]  dump_stack+0x15/0x1b
[  161.582630][ T7095]  should_fail_ex+0x259/0x270
[  161.582670][ T7095]  ? mctp_alloc_local_tag+0x71/0x610
[  161.582740][ T7095]  should_failslab+0x8c/0xb0
[  161.582786][ T7095]  __kmalloc_cache_noprof+0x5d/0x3e0
[  161.582832][ T7095]  ? mctp_alloc_local_tag+0x71/0x610
[  161.583016][ T7095]  mctp_alloc_local_tag+0x71/0x610
[  161.583055][ T7095]  ? should_fail_ex+0xdb/0x270
[  161.583108][ T7095]  mctp_ioctl+0x4c6/0x840
[  161.583142][ T7095]  ? ioctl_has_perm+0x26d/0x2c0
[  161.583170][ T7095]  sock_do_ioctl+0x73/0x230
[  161.583226][ T7095]  sock_ioctl+0x439/0x610
[  161.583299][ T7095]  ? mutex_lock+0x52/0x90
[  161.583339][ T7095]  ? __pfx_sock_ioctl+0x10/0x10
[  161.583372][ T7095]  __se_sys_ioctl+0xce/0x140
[  161.583414][ T7095]  __x64_sys_ioctl+0x43/0x50
[  161.583535][ T7095]  x64_sys_call+0x239d/0x2550
[  161.583572][ T7095]  do_syscall_64+0x112/0x360
[  161.583615][ T7095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.583727][ T7095] RIP: 0033:0x7f89fe81fb19
[  161.583748][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.583774][ T7095] RSP: 002b:00007f89fd26f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.583801][ T7095] RAX: ffffffffffffffda RBX: 00007f89feaa5fa0 RCX: 00007f89fe81fb19
[  161.583883][ T7095] RDX: 0000200000000140 RSI: 00000000000089e2 RDI: 0000000000000004
[  161.583902][ T7095] RBP: 00007f89fd26f090 R08: 0000000000000000 R09: 0000000000000000
[  161.583920][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.584011][ T7095] R13: 00007f89feaa6038 R14: 00007f89feaa5fa0 R15: 00007ffcfb905e08
[  161.584038][ T7095]  </TASK>
[  161.599295][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1085'.
[  161.668370][ T7099] loop2: detected capacity change from 0 to 256
[  161.802458][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1086'.
[  161.848536][ T7077] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.885786][ T3297] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  161.885812][ T3297] FAT-fs (loop2): Filesystem has been set read-only
[  161.886264][ T3297] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  161.890671][ T7105] loop5: detected capacity change from 0 to 512
[  161.926731][ T7105] bio_check_eod: 380 callbacks suppressed
[  161.926752][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.926752][ T7105] loop5: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  161.928684][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.928684][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.928770][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.928770][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.928899][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.928899][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.929009][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.929009][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.929090][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.929090][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.929180][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.929180][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.929242][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.929242][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.929364][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.929364][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.929434][ T7105] syz.5.1088: attempt to access beyond end of device
[  161.929434][ T7105] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  161.931301][ T3297] syz_tun (unregistering): left allmulticast mode
[  162.102127][  T346] bridge_slave_1: left allmulticast mode
[  162.102192][  T346] bridge_slave_1: left promiscuous mode
[  162.102300][  T346] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.107074][  T346] bridge_slave_0: left allmulticast mode
[  162.107112][  T346] bridge_slave_0: left promiscuous mode
[  162.107198][  T346] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.120723][  T346] pim6reg: left allmulticast mode
[  162.242989][   T54] smc: removing ib device syz1
[  162.246012][   T53] Bluetooth: hci0: Frame reassembly failed (-84)
[  163.224706][  T346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.243459][  T346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.247303][  T346] bond0 (unregistering): Released all slaves
[  163.250689][ T6939] infiniband syz1: ib_query_port failed (-19)
[  163.281714][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1097'.
[  163.371937][  T346] hsr_slave_0: left promiscuous mode
[  163.378717][  T346] hsr_slave_1: left promiscuous mode
[  163.379164][  T346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.379256][  T346] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.379881][  T346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.379896][  T346] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.421452][  T346] veth1_macvtap: left promiscuous mode
[  163.421484][  T346] veth0_macvtap: left promiscuous mode
[  163.421558][  T346] veth1_vlan: left promiscuous mode
[  163.421687][  T346] veth0_vlan: left promiscuous mode
[  163.503017][ T7144] loop3: detected capacity change from 0 to 256
[  163.605350][  T346] team0 (unregistering): Port device team_slave_1 removed
[  163.611428][  T346] team0 (unregistering): Port device team_slave_0 removed
[  163.768596][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1100'.
[  164.271358][ T3299] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  164.271387][ T3299] FAT-fs (loop3): Filesystem has been set read-only
[  164.271864][ T3299] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  164.287887][ T3689] Bluetooth: hci0: command 0x1003 tx timeout
[  164.287964][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  164.329929][ T7117] rxe_eth0 speed is unknown, defaulting to 1000
[  164.498677][  T346] gretap0: left allmulticast mode
[  164.498699][  T346] gretap0: left promiscuous mode
[  164.498938][  T346] bridge0: port 3(gretap0) entered disabled state
[  164.500344][  T346] bridge_slave_1: left allmulticast mode
[  164.500361][  T346] bridge_slave_1: left promiscuous mode
[  164.500449][  T346] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.501404][  T346] bridge_slave_0: left allmulticast mode
[  164.501426][  T346] bridge_slave_0: left promiscuous mode
[  164.501575][  T346] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.611457][  T346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.622680][  T346] bond0 (unregistering): Released all slaves
[  164.675936][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.676032][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.676159][ T7117] bridge_slave_0: entered allmulticast mode
[  164.676860][ T7117] bridge_slave_0: entered promiscuous mode
[  164.678562][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.678661][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.678879][ T7117] bridge_slave_1: entered allmulticast mode
[  164.696490][ T7117] bridge_slave_1: entered promiscuous mode
[  164.737666][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.739008][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.771686][ T7117] team0: Port device team_slave_0 added
[  164.773994][ T7117] team0: Port device team_slave_1 added
[  164.789249][  T346] hsr_slave_0: left promiscuous mode
[  164.790442][  T346] hsr_slave_1: left promiscuous mode
[  164.790888][  T346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.790907][  T346] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.791737][  T346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.791758][  T346] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.818604][  T346] veth1_macvtap: left promiscuous mode
[  164.818763][  T346] veth0_macvtap: left promiscuous mode
[  164.818929][  T346] veth1_vlan: left promiscuous mode
[  164.819078][  T346] veth0_vlan: left promiscuous mode
[  164.921048][  T346] team0 (unregistering): Port device team_slave_1 removed
[  164.929457][  T346] team0 (unregistering): Port device team_slave_0 removed
[  164.960527][ T7179] loop5: detected capacity change from 0 to 512
[  164.968624][ T7179] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  164.979184][ T7179] EXT4-fs (loop5): 1 orphan inode deleted
[  164.980132][ T7179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.982983][ T7179] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.013544][   T53] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1
[  165.019287][ T6889] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.040264][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.040281][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  165.040377][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.040971][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.040985][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  165.041018][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.147467][ T7117] hsr_slave_0: entered promiscuous mode
[  165.147986][ T7117] hsr_slave_1: entered promiscuous mode
[  165.148411][ T7117] debugfs: 'hsr0' already exists in 'hsr'
[  165.148428][ T7117] Cannot create hsr debugfs directory
[  165.193654][ T7195] loop5: detected capacity change from 0 to 256
[  165.230388][ T7170] rxe_eth0 speed is unknown, defaulting to 1000
[  165.289507][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1112'.
[  165.330009][  T346] IPVS: stop unused estimator thread 0...
[  165.351829][ T6889] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  165.351847][ T6889] FAT-fs (loop5): Filesystem has been set read-only
[  165.354069][ T6889] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  165.379355][ T7197] netlink: 'syz.0.1113': attribute type 3 has an invalid length.
[  165.379383][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'.
[  165.405205][ T7117] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  165.407181][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  165.407593][ T7117] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  165.409692][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  165.410145][ T7117] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  165.434638][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'.
[  165.455862][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  165.456303][ T7117] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  165.460580][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  165.556475][ T7170] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.556512][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.556585][ T7170] bridge_slave_0: entered allmulticast mode
[  165.557125][ T7170] bridge_slave_0: entered promiscuous mode
[  165.558436][ T7210] bond0: Error: Cannot enslave bond to itself.
[  165.559337][ T7170] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.559430][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.559711][ T7170] bridge_slave_1: entered allmulticast mode
[  165.560934][ T7170] bridge_slave_1: entered promiscuous mode
[  165.592400][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.632956][ T3428] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.731337][ T7219] loop0: detected capacity change from 0 to 512
[  165.757359][ T7219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.757601][ T7219] ext4 filesystem being mounted at /251/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.760523][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  165.760542][   T29] audit: type=1400 audit(1793881378.276:2377): avc:  denied  { write } for  pid=7209 comm="syz.0.1116" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  165.817214][ T7170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.818350][ T7170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.844750][ T7117] 8021q: adding VLAN 0 to HW filter on device team0
[  165.855008][ T7170] team0: Port device team_slave_0 added
[  165.865494][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.865539][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.869641][ T7170] team0: Port device team_slave_1 added
[  165.893728][ T3428] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.896138][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.896165][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.921502][ T7170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.921553][ T7170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  165.921595][ T7170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.926126][ T7170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.926162][ T7170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  165.926258][ T7170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.007282][ T3428] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.052683][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.061800][ T7170] hsr_slave_0: entered promiscuous mode
[  166.063063][ T7170] hsr_slave_1: entered promiscuous mode
[  166.063600][ T7170] debugfs: 'hsr0' already exists in 'hsr'
[  166.063643][ T7170] Cannot create hsr debugfs directory
[  166.087854][ T3428] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.119449][ T7230] bridge_slave_0: entered promiscuous mode
[  166.119632][ T7229] bridge_slave_0: left promiscuous mode
[  166.154610][ T7216] rxe_eth0 speed is unknown, defaulting to 1000
[  166.160782][   T29] audit: type=1400 audit(1793881378.676:2378): avc:  denied  { read } for  pid=3017 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  166.208930][   T29] audit: type=1400 audit(1793881378.726:2379): avc:  denied  { search } for  pid=3017 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.208971][   T29] audit: type=1400 audit(1793881378.726:2380): avc:  denied  { search } for  pid=3017 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.209018][   T29] audit: type=1400 audit(1793881378.726:2381): avc:  denied  { search } for  pid=3017 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.209053][   T29] audit: type=1400 audit(1793881378.726:2382): avc:  denied  { read } for  pid=3017 comm="dhcpcd" name="n26" dev="tmpfs" ino=5055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  166.209128][   T29] audit: type=1400 audit(1793881378.726:2383): avc:  denied  { open } for  pid=3017 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=5055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  166.230735][   T29] audit: type=1400 audit(1793881378.726:2384): avc:  denied  { getattr } for  pid=3017 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=5055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  166.361672][ T3428] bridge_slave_1: left allmulticast mode
[  166.361692][ T3428] bridge_slave_1: left promiscuous mode
[  166.361820][ T3428] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.369355][ T3428] bridge_slave_0: left allmulticast mode
[  166.369496][ T3428] bridge_slave_0: left promiscuous mode
[  166.369636][ T3428] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.431366][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'.
[  166.463930][ T3428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.464833][ T3428] bond0 (unregistering): Released all slaves
[  166.526210][ T7243] bond0: (slave bond_slave_1): Releasing backup interface
[  166.555025][   T29] audit: type=1400 audit(1793881379.076:2385): avc:  denied  { read } for  pid=7251 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.555061][   T29] audit: type=1400 audit(1793881379.076:2386): avc:  denied  { read open } for  pid=7251 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.677512][ T3428] hsr_slave_0: left promiscuous mode
[  166.681480][ T3428] hsr_slave_1: left promiscuous mode
[  166.681945][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.681965][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.687888][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.687908][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.724676][ T3428] veth1_macvtap: left promiscuous mode
[  166.724810][ T3428] veth0_macvtap: left promiscuous mode
[  166.724868][ T3428] veth1_vlan: left promiscuous mode
[  166.724912][ T3428] veth0_vlan: left promiscuous mode
[  166.832939][ T7276] loop0: detected capacity change from 0 to 1024
[  166.857195][ T7278] loop1: detected capacity change from 0 to 512
[  166.864753][ T7278] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  166.876217][ T7276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  166.876350][ T7276] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.920138][ T3428] team0 (unregistering): Port device team_slave_1 removed
[  166.930598][ T3428] team0 (unregistering): Port device team_slave_0 removed
[  167.137949][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.139095][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1
[  167.272350][ T7278] loop1: detected capacity change from 0 to 512
[  167.287658][ T7170] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  167.300086][ T7278] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  167.300104][ T7278] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  167.300610][ T7170] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  167.301714][ T7278] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  167.338427][ T7170] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  167.347325][ T7170] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  167.356612][ T7170] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  167.367739][ T7170] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  167.370125][ T7170] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  167.380498][ T7170] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  167.507152][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.507195][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.507268][ T7216] bridge_slave_0: entered allmulticast mode
[  167.507920][ T7216] bridge_slave_0: entered promiscuous mode
[  167.516165][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.516261][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.516587][ T7216] bridge_slave_1: entered allmulticast mode
[  167.520012][ T7216] bridge_slave_1: entered promiscuous mode
[  167.559772][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.575137][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.609420][ T7216] team0: Port device team_slave_0 added
[  167.611015][ T7216] team0: Port device team_slave_1 added
[  167.620742][ T7170] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.657625][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.657643][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.657682][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.658325][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.658342][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.658380][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.757300][ T7170] 8021q: adding VLAN 0 to HW filter on device team0
[  167.760797][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.760838][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.782328][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.782441][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.793119][ T7216] hsr_slave_0: entered promiscuous mode
[  167.794233][ T7216] hsr_slave_1: entered promiscuous mode
[  167.794794][ T7216] debugfs: 'hsr0' already exists in 'hsr'
[  167.794836][ T7216] Cannot create hsr debugfs directory
[  167.835800][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  167.851505][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2
[  167.894411][ T7327] size and base must be multiples of 4 kiB
[  167.894478][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.0.1128 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  167.894513][ T7327] Tainted: [W]=WARN
[  167.894523][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  167.894554][ T7327] Call Trace:
[  167.894562][ T7327]  <TASK>
[  167.894571][ T7327]  __dump_stack+0x1d/0x30
[  167.894645][ T7327]  dump_stack_lvl+0x95/0xd0
[  167.894675][ T7327]  dump_stack+0x15/0x1b
[  167.894755][ T7327]  mtrr_add+0xca/0xe0
[  167.894796][ T7327]  mtrr_ioctl+0xb29/0xfb0
[  167.894837][ T7327]  ? __pfx_mtrr_ioctl+0x10/0x10
[  167.894936][ T7327]  ? proc_reg_unlocked_ioctl+0x1/0x1b0
[  167.894978][ T7327]  proc_reg_unlocked_ioctl+0x123/0x1b0
[  167.895099][ T7327]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  167.895147][ T7327]  __se_sys_ioctl+0xce/0x140
[  167.895222][ T7327]  __x64_sys_ioctl+0x43/0x50
[  167.895335][ T7327]  x64_sys_call+0x239d/0x2550
[  167.895375][ T7327]  do_syscall_64+0x112/0x360
[  167.895416][ T7327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.895565][ T7327] RIP: 0033:0x7f619ca3fb19
[  167.895586][ T7327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.895612][ T7327] RSP: 002b:00007f619b48f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  167.895651][ T7327] RAX: ffffffffffffffda RBX: 00007f619ccc5fa0 RCX: 00007f619ca3fb19
[  167.895692][ T7327] RDX: 00002000000003c0 RSI: 0000000040104d01 RDI: 0000000000000007
[  167.895782][ T7327] RBP: 00007f619cad7b70 R08: 0000000000000000 R09: 0000000000000000
[  167.895799][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.895891][ T7327] R13: 00007f619ccc6038 R14: 00007f619ccc5fa0 R15: 00007fff0d516f48
[  167.895914][ T7327]  </TASK>
[  167.908315][ T7117] veth0_vlan: entered promiscuous mode
[  167.929126][ T7117] veth1_vlan: entered promiscuous mode
[  168.109726][ T7117] veth0_macvtap: entered promiscuous mode
[  168.113267][ T7117] veth1_macvtap: entered promiscuous mode
[  168.137091][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.151190][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.163692][ T7216] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.262651][   T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.263434][   T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.263715][   T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.264006][   T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.264227][ T7216] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  168.269615][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  168.271571][ T7216] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  168.331047][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  168.334565][ T7349] loop0: detected capacity change from 0 to 1024
[  168.339325][ T7216] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  168.342913][ T7349] EXT4-fs: inline encryption not supported
[  168.365221][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  168.365694][ T7216] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  168.367792][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  168.367915][ T7349] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.417335][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  168.450921][   T32] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set
[  168.451227][   T32] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  168.451258][   T32] EXT4-fs (loop0): This should not happen!! Data will be lost
[  168.451258][   T32] 
[  168.451276][   T32] EXT4-fs (loop0): Total free blocks count 0
[  168.451292][   T32] EXT4-fs (loop0): Free/Dirty block details
[  168.451349][   T32] EXT4-fs (loop0): free_blocks=0
[  168.451365][   T32] EXT4-fs (loop0): dirty_blocks=16
[  168.451380][   T32] EXT4-fs (loop0): Block reservation details
[  168.451395][   T32] EXT4-fs (loop0): i_reserved_data_blocks=1
[  168.453143][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  168.557039][ T7369] loop0: detected capacity change from 0 to 256
[  168.571585][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3
[  168.584023][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.600605][ T7216] 8021q: adding VLAN 0 to HW filter on device team0
[  168.622352][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.622390][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.635428][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.635535][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.691586][ T7170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.808895][ T7386] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  168.850362][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'.
[  168.951525][ T3298] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  168.951552][ T3298] FAT-fs (loop0): Filesystem has been set read-only
[  168.951927][ T3298] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  169.043873][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4
[  169.209430][ T7424] loop1: detected capacity change from 0 to 512
[  169.331693][   T32] bond0 (unregistering): Released all slaves
[  169.672523][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.677743][   T32] hsr_slave_0: left promiscuous mode
[  169.678060][   T32] hsr_slave_1: left promiscuous mode
[  169.685933][ T7436] FAULT_INJECTION: forcing a failure.
[  169.685933][ T7436] name failslab, interval 1, probability 0, space 0, times 0
[  169.686053][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.6.1141 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  169.686158][ T7436] Tainted: [W]=WARN
[  169.686181][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  169.686226][ T7436] Call Trace:
[  169.686247][ T7436]  <TASK>
[  169.686278][ T7436]  __dump_stack+0x1d/0x30
[  169.686376][ T7436]  dump_stack_lvl+0x95/0xd0
[  169.686487][ T7436]  dump_stack+0x15/0x1b
[  169.686627][ T7436]  should_fail_ex+0x259/0x270
[  169.686731][ T7436]  ? do_getname+0x2e/0x1c0
[  169.686806][ T7436]  should_failslab+0x8c/0xb0
[  169.686932][ T7436]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  169.687063][ T7436]  ? do_getname+0x2e/0x1c0
[  169.687128][ T7436]  do_getname+0x2e/0x1c0
[  169.687206][ T7436]  getname_flags+0x1d/0x30
[  169.687284][ T7436]  path_setxattrat+0x21a/0x320
[  169.687493][ T7436]  __x64_sys_setxattr+0x6e/0x90
[  169.687711][ T7436]  x64_sys_call+0xf6c/0x2550
[  169.687802][ T7436]  do_syscall_64+0x112/0x360
[  169.687925][ T7436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.688081][ T7436] RIP: 0033:0x7ff6959bfb19
[  169.688123][ T7436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.688191][ T7436] RSP: 002b:00007ff694417028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  169.688274][ T7436] RAX: ffffffffffffffda RBX: 00007ff695c45fa0 RCX: 00007ff6959bfb19
[  169.688297][ T7436] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000200000000780
[  169.688384][ T7436] RBP: 00007ff694417090 R08: 0000000000000003 R09: 0000000000000000
[  169.688429][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.688473][ T7436] R13: 00007ff695c46038 R14: 00007ff695c45fa0 R15: 00007fff5b5100e8
[  169.688544][ T7436]  </TASK>
[  169.870278][   T32] veth1_macvtap: left promiscuous mode
[  169.870397][   T32] veth0_macvtap: left promiscuous mode
[  169.870542][   T32] veth1_vlan: left promiscuous mode
[  169.978918][   T32] team0 (unregistering): Port device vlan0 removed
[  170.040387][ T7446] netlink: 'syz.1.1144': attribute type 3 has an invalid length.
[  170.040423][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'.
[  170.069202][ T7170] veth0_vlan: entered promiscuous mode
[  170.083759][ T7170] veth1_vlan: entered promiscuous mode
[  170.116229][ T7170] veth0_macvtap: entered promiscuous mode
[  170.119951][ T7170] veth1_macvtap: entered promiscuous mode
[  170.173065][ T7170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.178903][ T7170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.211833][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[  170.252421][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.252471][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.252552][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.252642][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.347830][ T7471] loop1: detected capacity change from 0 to 256
[  170.362540][ T7432] rxe_eth0 speed is unknown, defaulting to 1000
[  170.484861][ T7216] veth0_vlan: entered promiscuous mode
[  170.503712][ T7216] veth1_vlan: entered promiscuous mode
[  170.570289][ T7216] veth0_macvtap: entered promiscuous mode
[  170.578272][ T7216] veth1_macvtap: entered promiscuous mode
[  170.627411][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1145'.
[  170.628960][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.659602][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.745413][ T7486] loop7: detected capacity change from 0 to 512
[  170.766857][ T3293] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  170.766880][ T3293] FAT-fs (loop1): Filesystem has been set read-only
[  170.767319][ T3293] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  170.798633][ T7486] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  170.798661][ T7486] FAT-fs (loop7): Filesystem has been set read-only
[  170.798864][ T7486] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  170.798988][ T7486] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  170.883589][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.883632][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.883720][ T7432] bridge_slave_0: entered allmulticast mode
[  170.884308][ T7432] bridge_slave_0: entered promiscuous mode
[  170.885857][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.885946][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.886126][ T7432] bridge_slave_1: entered allmulticast mode
[  170.887359][ T7432] bridge_slave_1: entered promiscuous mode
[  170.919737][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.923893][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.966384][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  170.966404][   T29] audit: type=1400 audit(1793881383.486:2408): avc:  denied  { read append } for  pid=7485 comm="syz.7.1146" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  170.979155][ T7432] team0: Port device team_slave_0 added
[  171.089807][   T38] bridge_slave_1: left allmulticast mode
[  171.089833][   T38] bridge_slave_1: left promiscuous mode
[  171.089981][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.111172][   T38] bridge_slave_0: left allmulticast mode
[  171.111198][   T38] bridge_slave_0: left promiscuous mode
[  171.111493][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.135209][   T38] pimreg9: left allmulticast mode
[  171.139633][   T29] audit: type=1400 audit(1793881383.656:2409): avc:  denied  { wake_alarm } for  pid=7495 comm="syz.8.1118" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  171.189253][ T7506] loop6: detected capacity change from 0 to 1024
[  171.207295][ T7506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  171.207415][ T7506] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.266340][   T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.268640][   T38] bond0 (unregistering): Released all slaves
[  171.273227][   T54] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.273515][   T54] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.273713][   T54] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.273835][   T54] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.276776][ T7432] team0: Port device team_slave_1 added
[  171.365504][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.365520][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.365549][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.384266][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.384330][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.384425][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.575154][ T7432] hsr_slave_0: entered promiscuous mode
[  171.575848][ T7432] hsr_slave_1: entered promiscuous mode
[  171.578247][ T7432] debugfs: 'hsr0' already exists in 'hsr'
[  171.578294][ T7432] Cannot create hsr debugfs directory
[  171.610632][   T38] hsr_slave_0: left promiscuous mode
[  171.611241][   T38] hsr_slave_1: left promiscuous mode
[  171.611805][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.611864][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.640462][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.640501][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.671168][   T38] veth1_macvtap: left promiscuous mode
[  171.671240][   T38] veth0_macvtap: left promiscuous mode
[  171.681887][   T38] veth1_vlan: left promiscuous mode
[  171.691122][   T38] veth0_vlan: left promiscuous mode
[  171.813754][ T7517] loop7: detected capacity change from 0 to 256
[  171.819288][ T7117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  171.918030][ T7520] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1152'.
[  171.936198][   T38] team0 (unregistering): Port device team_slave_1 removed
[  171.940564][   T38] team0 (unregistering): Port device team_slave_0 removed
[  172.053739][ T7501] rxe_eth0 speed is unknown, defaulting to 1000
[  172.087030][ T7529] loop8: detected capacity change from 0 to 1024
[  172.087502][ T7529] EXT4-fs: Ignoring removed nomblk_io_submit option
[  172.098346][ T7529] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 not in group (block 33554437)!
[  172.098456][ T7529] EXT4-fs (loop8): group descriptors corrupted!
[  172.161247][ T7170] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  172.161280][ T7170] FAT-fs (loop7): Filesystem has been set read-only
[  172.161734][ T7170] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  172.295775][ T7529] loop8: detected capacity change from 0 to 8192
[  172.296065][ T7529] msdos: Unknown parameter 'L'
[  172.331735][ T7432] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  172.344640][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  172.349187][ T7432] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  172.353445][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  172.355264][ T7432] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  172.384636][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  172.413580][ T7432] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  172.414278][ T7536] loop6: detected capacity change from 0 to 128
[  172.418438][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  172.434693][ T7536] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  172.435276][ T7536] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.453946][   T29] audit: type=1400 audit(1793881384.956:2410): avc:  denied  { write } for  pid=7535 comm="syz.6.1160" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  172.460606][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1159'.
[  172.506116][ T7538] bond0: (slave bond_slave_1): Releasing backup interface
[  172.533517][  T346] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.601689][ T7536] erspan0: entered promiscuous mode
[  172.621102][  T346] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.648296][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.648339][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.648475][ T7501] bridge_slave_0: entered allmulticast mode
[  172.650115][ T7501] bridge_slave_0: entered promiscuous mode
[  172.690939][  T346] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.707563][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.707607][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.707698][ T7501] bridge_slave_1: entered allmulticast mode
[  172.708281][ T7501] bridge_slave_1: entered promiscuous mode
[  172.761360][ T7557] loop8: detected capacity change from 0 to 512
[  172.769586][ T7557] EXT4-fs: Ignoring removed orlov option
[  172.788844][  T346] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.791591][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.814198][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.815701][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.816050][ T7557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.816127][ T7557] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.884898][ T7501] team0: Port device team_slave_0 added
[  172.886575][ T7501] team0: Port device team_slave_1 added
[  172.903373][ T7432] 8021q: adding VLAN 0 to HW filter on device team0
[  172.910739][   T29] audit: type=1400 audit(1793881385.426:2411): avc:  denied  { write } for  pid=7556 comm="syz.8.1163" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  173.003848][   T29] audit: type=1400 audit(1793881385.516:2412): avc:  denied  { write } for  pid=7556 comm="syz.8.1163" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  173.003916][   T29] audit: type=1400 audit(1793881385.526:2413): avc:  denied  { write } for  pid=7556 comm="syz.8.1163" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  173.064342][ T7566] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  173.118329][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.118373][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.199701][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.199778][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.241748][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.241957][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.283487][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.324525][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.324557][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.324766][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.433606][  T346] bridge_slave_1: left allmulticast mode
[  173.433642][  T346] bridge_slave_1: left promiscuous mode
[  173.434064][  T346] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.436511][  T346] bridge_slave_0: left allmulticast mode
[  173.436529][  T346] bridge_slave_0: left promiscuous mode
[  173.436859][  T346] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.656008][ T7216] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.689492][ T7117] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  173.713249][  T346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.714926][  T346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.716680][  T346] bond0 (unregistering): Released all slaves
[  173.731273][ T7571] loop6: detected capacity change from 0 to 1024
[  173.758960][ T7571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  173.759047][ T7571] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.798471][ T7501] hsr_slave_0: entered promiscuous mode
[  173.799121][ T7501] hsr_slave_1: entered promiscuous mode
[  173.801630][ T7432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.848137][ T7552] rxe_eth0 speed is unknown, defaulting to 1000
[  173.985134][  T346] hsr_slave_0: left promiscuous mode
[  173.986864][  T346] hsr_slave_1: left promiscuous mode
[  173.987517][  T346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.987535][  T346] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.990851][  T346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.990872][  T346] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.037971][  T346] veth1_macvtap: left promiscuous mode
[  174.038007][  T346] veth0_macvtap: left promiscuous mode
[  174.038100][  T346] veth1_vlan: left promiscuous mode
[  174.038141][  T346] veth0_vlan: left promiscuous mode
[  174.093317][   T29] audit: type=1400 audit(1793881386.616:2414): avc:  denied  { write } for  pid=7582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  174.138271][   T29] audit: type=1400 audit(1793881386.656:2415): avc:  denied  { write } for  pid=7600 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  174.151712][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1168'.
[  174.191949][  T346] team0 (unregistering): Port device team_slave_1 removed
[  174.195054][  T346] team0 (unregistering): Port device team_slave_0 removed
[  174.234163][ T7593] netlink: 'syz.8.1168': attribute type 3 has an invalid length.
[  174.234183][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1168'.
[  174.234676][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5
[  174.305344][ T7501] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  174.307208][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.307678][ T7501] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  174.310041][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.353782][ T7117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  174.354474][ T7501] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  174.360073][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.436449][ T7611] ==================================================================
[  174.436494][ T7611] BUG: KCSAN: data-race in copy_mm / percpu_counter_destroy_many
[  174.436547][ T7611] 
[  174.436555][ T7611] write to 0xffff88810006f148 of 8 bytes by task 7599 on cpu 0:
[  174.436577][ T7611]  percpu_counter_destroy_many+0xbd/0x320
[  174.436617][ T7611]  __mmdrop+0x1c9/0x340
[  174.436645][ T7611]  finish_task_switch+0x296/0x340
[  174.436686][ T7611]  __schedule+0x7a9/0xd40
[  174.436714][ T7611]  preempt_schedule_common+0x12/0x40
[  174.436744][ T7611]  preempt_schedule_thunk+0x16/0x40
[  174.436786][ T7611]  __local_bh_enable_ip+0x68/0x80
[  174.436818][ T7611]  _raw_spin_unlock_bh+0x17/0x20
[  174.436846][ T7611]  neigh_parms_release+0xbb/0x150
[  174.436885][ T7611]  inetdev_event+0x740/0xb80
[  174.436913][ T7611]  raw_notifier_call_chain+0x72/0x1a0
[  174.436954][ T7611]  unregister_netdevice_many_notify+0xe60/0x15a0
[  174.436982][ T7611]  unregister_netdevice_queue+0x1cd/0x200
[  174.437010][ T7611]  nsim_destroy+0x162/0x5a0
[  174.437049][ T7611]  __nsim_dev_port_del+0xd2/0x140
[  174.437074][ T7611]  nsim_dev_reload_destroy+0x1a1/0x2c0
[  174.437099][ T7611]  nsim_drv_remove+0x3e/0x110
[  174.437123][ T7611]  nsim_bus_remove+0x15/0x20
[  174.437161][ T7611]  device_release_driver_internal+0x2bb/0x510
[  174.437198][ T7611]  device_release_driver+0x19/0x20
[  174.437226][ T7611]  bus_remove_device+0x2fa/0x320
[  174.437274][ T7611]  device_del+0x35f/0x790
[  174.437301][ T7611]  device_unregister+0x15/0x40
[  174.437330][ T7611]  del_device_store+0x1c1/0x220
[  174.437369][ T7611]  bus_attr_store+0x57/0x80
[  174.437396][ T7611]  sysfs_kf_write+0xfe/0x120
[  174.437440][ T7611]  kernfs_fop_write_iter+0x1d2/0x2e0
[  174.437474][ T7611]  vfs_write+0x57a/0x990
[  174.437505][ T7611]  ksys_write+0xdc/0x1a0
[  174.437546][ T7611]  __x64_sys_write+0x40/0x50
[  174.437586][ T7611]  x64_sys_call+0x154e/0x2550
[  174.437620][ T7611]  do_syscall_64+0x112/0x360
[  174.437662][ T7611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.437691][ T7611] 
[  174.437697][ T7611] read to 0xffff88810006ec00 of 1664 bytes by task 7611 on cpu 1:
[  174.437716][ T7611]  copy_mm+0xd1/0x340
[  174.437749][ T7611]  copy_process+0x10e9/0x2400
[  174.437782][ T7611]  kernel_clone+0x1c0/0x5f0
[  174.437819][ T7611]  __x64_sys_clone+0x143/0x180
[  174.437856][ T7611]  x64_sys_call+0x2479/0x2550
[  174.437888][ T7611]  do_syscall_64+0x112/0x360
[  174.437930][ T7611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.437958][ T7611] 
[  174.437963][ T7611] Reported by Kernel Concurrency Sanitizer on:
[  174.437983][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: dhcpcd-run-hook Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  174.438021][ T7611] Tainted: [W]=WARN
[  174.438030][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  174.438048][ T7611] ==================================================================
[  174.452848][   T29] audit: type=1400 audit(1793881386.976:2416): avc:  denied  { ioctl } for  pid=7609 comm="syz.6.1169" path="socket:[21518]" dev="sockfs" ino=21518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  174.535280][ T7618] loop6: detected capacity change from 0 to 164
[  174.547770][   T29] audit: type=1400 audit(1793881387.066:2417): avc:  denied  { mount } for  pid=7609 comm="syz.6.1169" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  174.550130][ T7599] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.611161][ T7501] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  174.645772][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.883473][ T7599] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.915313][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6
[  174.919373][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.941965][ T7599] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.989195][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.989237][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.989319][ T7552] bridge_slave_0: entered allmulticast mode
[  174.989927][ T7552] bridge_slave_0: entered promiscuous mode
[  174.999768][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.999867][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.004259][ T7552] bridge_slave_1: entered allmulticast mode
[  175.005460][ T7552] bridge_slave_1: entered promiscuous mode
[  175.056864][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.058432][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.075731][ T7599] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.109618][ T7552] team0: Port device team_slave_0 added
[  175.118652][ T7552] team0: Port device team_slave_1 added
[  175.141954][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.141974][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  175.142320][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.145717][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.145759][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  175.145857][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.198241][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.253658][ T7501] 8021q: adding VLAN 0 to HW filter on device team0
[  175.256917][ T7552] hsr_slave_0: entered promiscuous mode
[  175.257455][ T7552] hsr_slave_1: entered promiscuous mode
[  175.257768][ T7552] debugfs: 'hsr0' already exists in 'hsr'
[  175.257785][ T7552] Cannot create hsr debugfs directory
[  175.261089][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.261121][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.308156][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.308189][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.405308][ T7432] veth0_vlan: entered promiscuous mode
[  175.411650][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7
[  175.442476][ T7432] veth1_vlan: entered promiscuous mode
[  175.477045][ T7552] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  175.489129][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  175.489610][ T7552] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  175.507431][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  175.507811][ T7432] veth0_macvtap: entered promiscuous mode
[  175.508620][ T7552] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  175.511137][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  175.511523][ T7552] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  175.518577][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  175.527651][ T7432] veth1_macvtap: entered promiscuous mode
[  175.566382][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.575478][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.648229][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.661296][ T7552] 8021q: adding VLAN 0 to HW filter on device team0
[  175.662121][   T32] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.662244][   T32] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.662303][   T32] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.662347][   T32] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.679886][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.679989][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.706279][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.706385][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.757152][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.839294][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8
[  175.976498][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.004028][ T7501] veth0_vlan: entered promiscuous mode
[  176.007019][ T7501] veth1_vlan: entered promiscuous mode
[  176.026953][ T7501] veth0_macvtap: entered promiscuous mode
[  176.029291][ T7501] veth1_macvtap: entered promiscuous mode
[  176.042805][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.055872][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.072759][   T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.074021][   T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.093394][   T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.094455][   T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.136740][ T7552] veth0_vlan: entered promiscuous mode
[  176.139495][ T7552] veth1_vlan: entered promiscuous mode
[  176.157495][ T7552] veth0_macvtap: entered promiscuous mode
[  176.160189][ T7552] veth1_macvtap: entered promiscuous mode
[  176.174966][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.179342][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.192922][   T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.194195][   T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.194414][   T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.194561][   T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.033454][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  180.033474][   T29] audit: type=1400 audit(1793881392.556:2425): avc:  denied  { write } for  pid=7742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.079299][   T29] audit: type=1400 audit(1793881392.596:2426): avc:  denied  { write } for  pid=7753 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.513317][   T29] audit: type=1400 audit(1793881393.036:2427): avc:  denied  { write } for  pid=7756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  180.552726][   T29] audit: type=1400 audit(1793881393.076:2428): avc:  denied  { write } for  pid=7767 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.230178][   T29] audit: type=1400 audit(1793881393.746:2429): avc:  denied  { write } for  pid=7770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.271417][   T29] audit: type=1400 audit(1793881393.786:2430): avc:  denied  { write } for  pid=7781 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.806455][   T29] audit: type=1400 audit(1793881394.326:2431): avc:  denied  { write } for  pid=7787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  181.842994][   T29] audit: type=1400 audit(1793881394.366:2432): avc:  denied  { write } for  pid=7798 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1