last executing test programs: 2m17.941441945s ago: executing program 2 (id=2758): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x41341) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x2b) bind$can_raw(r2, &(0x7f00000000c0), 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f36356e030890e0879b0af8c6e70a9b334a959b669a9b2f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b090acd3b78130daa61d8e804005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d2d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f37c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b3d15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a737be3c67a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c894c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc2c0db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee800", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0xa0080119) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r5, 0x6, 0xfffffffffffffff9, 0x6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 2m17.286211934s ago: executing program 2 (id=2765): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cfeff005200010000000000000000000200000008000100"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2m17.061073263s ago: executing program 2 (id=2766): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) io_setup(0x20fe, &(0x7f00000001c0)) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88536, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xffffffffffffff7f}, 0x120, 0x10000, 0x4, 0x9, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) 2m16.509648882s ago: executing program 2 (id=2767): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffcd3, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) fchdir(r2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000001100)=ANY=[@ANYRESHEX=r3], 0xfe44, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b00000200000000000000000080689e16000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) syz_clone(0x84000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) getdents(r6, &(0x7f0000002cc0)=""/4089, 0xff9) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r9, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) 2m15.691138475s ago: executing program 2 (id=2779): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = semget$private(0x0, 0x7, 0x180) semtimedop(r1, &(0x7f0000000140), 0x0, 0x0) 2m15.004017157s ago: executing program 2 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0xcf8, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0xce4, 0x1, [@m_police={0xce0, 0x1, 0x0, 0x0, {{0xb}, {0xcb4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x8000005, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0xe36, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0xb, 0x7, 0x6, 0x7f, 0x203ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x7, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x4, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x8005, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x203, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x7, 0x3ff, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe39, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x457, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x0, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0x101, 0x10, 0xf, 0x8, 0x1, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0x4, 0x5, 0x7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x10, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x4000001, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xade, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa0e, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x1, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff42, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x5, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0x100000c3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x3, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xcf8}}, 0x0) 2m14.96791055s ago: executing program 32 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0xcf8, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0xce4, 0x1, [@m_police={0xce0, 0x1, 0x0, 0x0, {{0xb}, {0xcb4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x8000005, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0xe36, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0xb, 0x7, 0x6, 0x7f, 0x203ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x7, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x4, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x8005, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x203, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x7, 0x3ff, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe39, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x457, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x0, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0x101, 0x10, 0xf, 0x8, 0x1, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0x4, 0x5, 0x7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x10, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x4000001, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xade, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa0e, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x1, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff42, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x5, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0x100000c3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x3, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xcf8}}, 0x0) 1m11.142444239s ago: executing program 1 (id=3517): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100}, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000700001f18120000e9922532eb1c0099ce086b5c78f73cf5c70239676f60f616ac4e7bdee24781b8eb057092ebf9bbd914373641e9b012b5cc136d72e754c97a72d9"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r6, 0x4, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x73, 0x8, 0xff, 0x7, 0x0, 0x9, 0x100, 0xf, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xb}, 0x8000, 0x3, 0x2, 0x3, 0xf1e, 0x9e, 0x4, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x46, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8, 0xffffffff}]}, 0x10) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x1ffffffd, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) 1m10.584587079s ago: executing program 1 (id=3520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@usrjquota}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x33, 0x38, 0x33, 0x39, 0x0, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x14, r6, 0x405, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044890) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001780)=""/4096, &(0x7f00000002c0)=0x1000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r3}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r9 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r10 = dup(r9) write$binfmt_elf64(r10, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1m9.992182172s ago: executing program 1 (id=3521): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 1m9.960573915s ago: executing program 1 (id=3522): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000800, &(0x7f0000000000)={[{@nojournal_checksum}]}, 0x7, 0x4ba, &(0x7f0000000740)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_setup(0x202, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x4000000) 1m9.67441782s ago: executing program 1 (id=3524): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="0002020100000000ff02010000002e5185ff245ab0d4e028ce3200"/42], 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0xbf}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = pidfd_getfd(r7, r7, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r9 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = socket$unix(0x1, 0x1, 0x0) io_uring_enter(r8, 0x77f6, 0x853f, 0x0, &(0x7f00000001c0)={[0x2]}, 0x8) bind$unix(r13, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0xa, 0x0) 1m9.00567993s ago: executing program 1 (id=3529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000000580)="$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") 1m8.99514841s ago: executing program 33 (id=3529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000000580)="$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") 59.609587706s ago: executing program 5 (id=3616): r0 = socket$inet6(0xa, 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x2, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc008) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="8d8e72893928377de6d43431dfeef82878de245a0919b553943387dd514f8e327ee6fa35259e3968ca5cbfd7e4ab21586a521472229cb31d5239798ba180ebee42e82e9d76e0acb05b68cb50b0043ad1f77aa3abbedf3c0c08f5546a2d15a5", 0x5f}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 59.602677197s ago: executing program 5 (id=3617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x9, &(0x7f0000001d00)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x7, 0x0, 0x2}]) 59.493503546s ago: executing program 5 (id=3621): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000fd000a0000000600010013"], 0x1c}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 59.390666635s ago: executing program 5 (id=3625): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x41341) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000100)={0x1d, r6}, 0x2b) bind$can_raw(r5, &(0x7f00000000c0), 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x6, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0xa0080119) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r8, 0x6, 0xfffffffffffffff9, 0x6}) epoll_wait(r11, &(0x7f0000000340)=[{}, {}], 0x2, 0xff) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r12}, 0x18) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 59.056250075s ago: executing program 5 (id=3627): r0 = io_uring_setup(0x10d7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) close_range(r0, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = syz_io_uring_setup(0x63c3, &(0x7f00000000c0)={0x0, 0x1e5, 0x3180, 0x0, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x8b, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x27, 0x2, 0xfffffffc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$nfc_llcp(r7, &(0x7f0000000300)={&(0x7f0000000280)={0x27, r8, 0x1, 0x4, 0x59, 0x2, "bcd28f6ff0a5a4aa433c562e374488a9e8da38bcb0c961bece05da572b8fc7459d7a0118dd834d55666c89c1da52449cbb2290a32c0148da9075de91800c6d", 0x18}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000380)="792905174ae42aaab1303de577b599530e1fb44e0ff4ce91a5e7453e06c9b2ed902a055c8f41f8d22d0bc6a3d2493916b0acc7694f3d866f48a5babe4712b0017a78cdc6467e1138024aaeec02f6c16793773fbb0daa5e54d66a46aa494d5f8419f8455b34a8b5f1dee911f3ac7c0586b4583d0ec21cee2650210ecbae8251fa1858fbabbf7eaf6d34c82eb68e3888817b991467af3f885b514d1a268711c3925a609708a79d0cd8e8e3fe6b73ce1a4b51021a18ec9b71f7328f4beace7a17ab14a14df8f59e810205582bf679739d940fd5d4677b271f96d74c4f317a0c83a5", 0xe0}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="88000000000000001100000007ab00004d1ba6ea073790b5c3c9c1ce438fef86510cbc07e6527c741d12fb2f516bc953fb25755a200e761584495808d1bf24e79bdc11dab87b9d1f7eafc9d74a38327c2748f6f2786caa6d2fb9c2cc041fc231b4b6f5cbfa678021ea571d2d6d969142cabb682cb3546bb1db23a3534c3155b3f3a2a12883061a00"], 0x88, 0x811}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf25090000003c0003800800010001000000140002006272696467655f736c6176655f300000080003000000000014000600ff010000000000000000000000000001"], 0x50}}, 0x48040) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x0) r12 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) 58.760114962s ago: executing program 5 (id=3633): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7a0a00ff00000000711095000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f00000007c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@nojournal_checksum}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4442, 0x108) fallocate(r5, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 43.71522206s ago: executing program 34 (id=3633): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7a0a00ff00000000711095000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f00000007c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@nojournal_checksum}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4442, 0x108) fallocate(r5, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 38.386930424s ago: executing program 6 (id=3831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") 38.040501735s ago: executing program 6 (id=3836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) close_range(r2, 0xffffffffffffffff, 0x0) 38.016860067s ago: executing program 6 (id=3837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$eJzs3c9vI1cdAPDveO3t/sjWKXCAHkqhRbsrWHvT0Dbi0BaB4FQJKPclJE4UxYmjxGk3UUUT8QdwQYDECS5ckPgPUCUuHCukIjiDKAIh2MKBA3TQ2ONsNuuJvcGJ0+TzkWbnvfn1fc/e+fFmXsYBnFtPR8QrEfFBmqY3I6KaTy/lQ+x0h2y59++9OZcNSaTpa39PIsmn9baV5OOr+WqXIuIbX434dvJw3I2t7eXZZrOxnufr7ZW1+sbW9q2lldnFxmJjdXp66oWZF2een7k9knpei4iXvvznH3zvZ1956Zefe+OPd/564ztZsb6Uz99fj0dUPmxmt+qVzmexf4X1iJePGO/UKXdqmLs83Dq7x1geAACKZdf4H4mIT0fEzajGhcMvZwEAAIAPofTlifhPEpH2d7HfxEtRuDwAAABwCpUiYiKSUi3vCzARpVKt1u3D+7G4kr4V0f7sQmtzdT6bFzEZldLCUrNxO+8rPBmVJMtPddL3889187vvRXTy0xHxRER8v3q5k6/NtZrz4775AQAAAOfE1QPt/39Vu+1/AAAA4IyZHHcBAAAAgGOn/Q8AAABnn/Y/AAAAnGlfe/XVbEh7v389//rW5nLr9VvzjY3l2srmXG2utb5WW2y1Fjvv7FsZtL1mq7X2+VjdvFtvNzba9Y2t7Tsrrc3V9p2lB34CGwAAADhBT3zy7d8nEbHzhcudIXOxYNkLJ1oy4LiV91JJPu6z9//h8e74vRMqFHAiBp3Tf1s9oYIAJ6487gIAY1N5lIX9nQCcScmA+YWdd97Jx58abXkAAIDRu/6J4uf/pUPX3Dl8NnDq2Ynh/Oo9/3/8QB44+zrP/4s6/B7kYgHOlIozPpx7A5//F3UAeGfYCGn6aCUCAABGbaIzJKVafntvIkqlWi3iWqe7fyVZWGo2bufPB35XrTyW5ac6ayYD2wwAAAAAAAAAAAAAAAAAAAAAAAAAQFeaJpEO47GhlgIAAABOoYjSX5Jfdd/lf7367MTB+wMXk39XI/+J0Dd+/NoP78622+tT2fR/7E1v/yif/tw47mAAAAAAB/Xa6b12PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0vv33pzrDb1pafX44/7tixEx2S9+OS51xpeiEhFX/plEed96SURcGEH8nd2I+Hi/+ElWrL2Q/eJfPv74MZl/Cv3iXx1BfDjP3s6OP69k+9/FiNi//5Xi6c64//5Xjnggf1Sd4192gOtz/O0d/y4U7P/XDmxrsiDGk+/+ol4YfzfiyXL/408vflIQ/5kh6/itb25vF81LfxJxve/5J3kgVr29slbf2Nq+tbQyu9hYbKxOT0+9MPPizPMzt+sLS81G/u9D268UBS7dr/+VgviTA+r/7JD1/++7d+99tKA4Wfwbz/SJ/+uf5ks8HL+Un/s+k6ez+dd76Z1uer+nfv6bp4rKlsWfL6j/oO//xpD1v/n17/4pIj7Y95UCAGO0sbW9PNtsNtYPTWSXLYOWOa2JrJV+CoohcbTEsP9Fj5R4a6QbTNM0jf9vT0li7B94LzHuIxMAADBq9y/6x10SAAAAAAAAAAAAAAAAAAAAOL9O4nViB2Pu7KWSUbxCGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJP4XAAD//6H70dw=") 37.891724158s ago: executing program 6 (id=3838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000800, &(0x7f0000000000)={[{@nojournal_checksum}]}, 0x7, 0x4ba, &(0x7f0000000740)="$eJzs3E9sFFUcAODfbFta/smKiIKoRTQ2GlsoKBy8YDTxoIkRD3ps2kKQQg2tiRCiS2LwaEi8G49ePXhVb8aTiVc8mhgSYrgAntbM7ky73c4udLt0hf2+ZNn3Zt7se2/fvJk373UJoG+Npv8kEdsi4lpE7IiIUnOC0frb7ZuXpu/cvDQdlWr1xD9JeljcSuOZJHvfmkXGShGlL5PlHQ0WLlw8MzU3N3s+i08snv1kYuHCxVdOn506NXtq9tzksWNHDh86+trkq2uvVEF+ab1u7f18ft+etz+6+u70YL59JHtvrEe3jMZoUVFqXuh2Zj22vSGcDPawIKxJev6nzTVU6/87YiA0HvSLarVaHW69u1JtdnnVFuCBlUSvSwD0Rn6jT59/81fRQGDT/Rl+9NyN4/UHoLTet7NXxLO1jfk8yFDT8203jUbEh5V/v01fcZ/mIQAAGv18PB8JNo3/yhG7G9I9kq2hlCPi0YjYGRGPRcSuiHg86mmfiIgnmz5/ICKqbfIfbYqvHv+Urq+vhu2l47/Xs7Wt5fFfNK6ClQey2PaIfMA8ezD7TsZiaPjk6bnZQ23y+OXNP75uta9x/Je+0vzzsWBWjuuDTRN0M1OLUx1XuMmNyxF7B5vrnwxGJEsrAUlE7ImIvWv43HJD+PRL3+9bigytTHf3+tdUC9fRurBUUf0u4sV6+1diRfsv55i0X5+cGIm52YMT6VlwsDCP336/8l6r/O9a/x//aj7kraM/nch61vql7b+l4fyPfP12uf7lJCJZWq9dWHseV/78quUzTafn/6bkg1o4fy79bGpx8fyhiE3JO/n2y0vbJ5ePzePpe1Tq9R87UNz/d2bHpN/EUxGRnsRPR8QzUX9CTMu+PyKei4gDber/6xvPf9x5/e+vtP4zhde/Fe2/vF7fKpBU6qkLdg2c2X/tTouLx721/5FaaCzbUnz9S1ZcItqUdEVgvd8fAAAAPAhKEbGtYS5pW5RK4+P1OaBdsaU0N7+w+PLJ+U/PzdR/I1COoVI+01WfDx5K8vnPckN8sil+OJs3/mZgcy0+Pj0/N9PTmgNba30+KY0vXQvq/T/1d3emmIH/s9XraH4EBP3ibr1999UNKgiw4dztoX819P9KiyQVfykDDyf3f+hfRf3/iw6OAR4sVX0Z+tpa+r9rBTxcBuP9pXCppyUBNpp7OvSle/qRfMeB6nDxrpFYnThG2n/gQHRWjM0FefUkkI6sepL75k6Oyv83hZZporS2DxyO7rTpyfV/Lad2d/3kr2Z/K9/tFvxhQ/ppUaAnlyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICu+y8AAP//op3a9g==") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0xa00}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffffff, 0x0, 0x60) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x4, 0x0) 37.597339794s ago: executing program 6 (id=3839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@usrjquota}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x33, 0x38, 0x33, 0x39, 0x0, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x14, r6, 0x405, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044890) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r3}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) r11 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r12 = dup(r11) write$binfmt_elf64(r12, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 37.468680756s ago: executing program 6 (id=3840): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fchmod(r2, 0x11) 37.445174278s ago: executing program 35 (id=3840): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fchmod(r2, 0x11) 7.781680508s ago: executing program 4 (id=4240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) 7.739806392s ago: executing program 4 (id=4241): r0 = socket(0x6, 0x800, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000003e000701fe6f70915244f6b0aca1965468f512644a6c5cfe9056c195d168702444805d203ad8bda55e2e6fd600d33a050904c399b154178621d7281e80dcb135b04432548d835cc33083e8566c6a95f27ff5459a8e5942f63f82c3d4861d92edfbd01a6bb0fdb296fb18d4507b6bfb6ba1d8308a603ab6080c272c92690f27ebbb9535aa5db77626ce77592adf63e7ce8095327a53f23ad156f34e8bd2c338bf3552"], 0x34}, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x25, 0x35a, &(0x7f0000000bc0)="$eJzs3U9oHGUUAPC3nSS7DcbsQSh6Wr0JUpqIB28JpUIxB60s/gNxsal/srGQxYX0kM1ehOJJ8SLoyVsPeuxZRES8efBqBamKF3srNDgyu7Ob3ezGZg8bW/r7HcLjfd+beTMZ8k1C8uXNVmxcnI1Lt27djFKpEDMrZ1fidiHKcSKS6NqNsT6aG58HAO5xt9M0/k677ja3GJ/M92JrPwDcvzrr/9sL+4niBMVXH5pGSwDAlB3x+/8XxmYvT60tAGCKsvW/FAPr/xNDwwd+zD/T/50AAOD+9dKrrz2/uhZxoVIpRWx+90Y33V/3Vy/Fu1GP9TgTi7EX3TeF6L4tZB+fO7927kwl83s5qllFsxqx2WpWu28Kq0mnvhhLsRjlvD7t1ydZ/VKnvhIRu61mtVNfaFZnYz4//y/zsR7LsRiPjNRHnF87t1zJD1Dd7NW3ItpR6l1E1v/pWIyf3orLUY+LkdXu97+zVKmcTdeG6pvXip15AAAAAAAAAAAAAAAAAAAAAAAwDacrfeX+/jfpZqv54YWDE8pD++NUu8P5/kDt7v5AabG3O8/V5OD+QMP78zSrM3Hif71yAAAAAAAAAAAAAAAAAAAAuHc0tueiVq+vbzW2r2wMBq2BzPs/fPXtyegNzeSl7yX7VZEnh47Tmzhw5CT6p0j75WkyNCcPkoje5N3atev9jgfnFPtXMVKeBcWRoULeU61eX3j8t8/HVf2TBbudTBIjt2U4KOTnHxjafDhLlCJi77Cqw4Plu8y5kabpYeU7n41WRSFiJiZu4wjB9zffefTpxqlnOplv8k0fnnxq8eUbn37550atHu3unanX57Yae+kRjpz1OjqUDDw/hfw+F8Y8CeOD9n6mvdXYriU///XKYx//eGByMv75SQczHxx+rq8PZua6QSGi3LsJ/9Xq7JiHf3zw+p3+0zv5J+7UFyu16zu//nHUqoEvEjbqAAAAAAAAAAAAAAAAAACAYzHwt+ITePbF6XUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMdv////L0REJ9i+0q7lwcYkwZ1WjA4V17cah5785LFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7B/AwAA//8ysG5J") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0xfffffff7}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000000000001010000004e230005000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r11 = dup(r3) bind$unix(r11, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x240440c8) 7.223803088s ago: executing program 4 (id=4243): syz_usb_connect(0x1, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0xb001, 0xff03, 0x3a8, 0x2c0, 0xe8, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffb, 0xfffff801, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$netlink(r0, &(0x7f00000001c0), 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x3, 0x5, 0xfa, 0x3, 0x83, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x1e4, 0x0, 0x1, @rand_addr=' \x01\x00', @private2, {[@srh={0x88, 0x8, 0x4, 0x4, 0x1, 0x68, 0x3, [@mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x21}, @dstopts={0x67, 0x6, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xba, 0x22, "ed4ef63a13ddd68bf6a88205d353fb968e4a2bb9c9b7ff6f27d2f3adba48f8e01147"}]}, @hopopts={0x87, 0x1c, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x3311, [0x0, 0xfa4, 0x7, 0x7ff, 0x4]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xfffc, [0x1af7]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x2}, @generic={0x6, 0x5d, "5a868a361534ebd6104ec9bac8ecbdfb4d38c7483165140a6f6bb31729625d779bf8a67577afee2ee8a3f93312ad30de906628c6030f73fe2510a1cb3860dd0ee210f3e9e7c0d8dc0105bc9cf3a0a519e0eae6e506e832bbffd77bd8e2"}, @generic={0x4, 0xa, "276b9fef0c30a3d1b072"}]}], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446015e93dfbfe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c0439a96a"}}}, 0x21a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xf2}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x1b) 6.393421702s ago: executing program 8 (id=4257): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4082, &(0x7f0000000380)={[{@errors_remount}]}, 0x1, 0x4c8, &(0x7f0000000a00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 6.285336491s ago: executing program 8 (id=4258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0), 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000fc0)={@dev, 0x0}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001040)={0x0, @private, @loopback}, &(0x7f0000001080)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000010c0)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@private2, 0x8, r10}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000080)={@private2, r10}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x78, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x78}}, 0x1) 5.930591723s ago: executing program 8 (id=4262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") 5.680958535s ago: executing program 8 (id=4263): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x80, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 4.49726823s ago: executing program 4 (id=4269): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x69, 0xad, 0x98, 0xdf, 0x1b3d, 0x16f, 0xacd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x30, 0x0, [{{0x9, 0x4, 0xe1, 0x81, 0x0, 0xe3, 0x5b, 0x31, 0x9}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff41, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 2.020316121s ago: executing program 0 (id=4313): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4082, &(0x7f0000000380)={[{@errors_remount}]}, 0x1, 0x4c8, &(0x7f0000000a00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 1.891283062s ago: executing program 7 (id=4316): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'vcan0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="0e", 0x1}, {0x0, 0x500}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x40c0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000f00)={[{@nolazytime}, {@abort}, {@dioread_nolock}, {@mblk_io_submit}, {@noauto_da_alloc}], [{@uid_gt}, {@fowner_gt}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0xde, 0x53b, &(0x7f00000014c0)="$eJzs3c1vI2cZAPBnJnbIdlOSAodSqR+ii3YrWHvT0Dbi0BaBuFUClfsSJd4oWme9ip12E1WQFX8AEkJQiRMnLkjcuCCh/RMQUiX2jgCBEGzhwAEYNOPxNmvG2cD6Y5X8ftJrv/OOPc/zOvb4nY94AjizXoiINyNiLiJeioilsj0tSxz2S/64D++9t5GXvPntvySRlG0RRfW+8+XTFvp3lbr7B9fX2+3Wbjnd7O3cbHb3Dy5v76xvtbZaN1ZXV15de23tlbUrY+ln3q/Xv/KHH3z3J199/Zeff/e3V/906Vt50l8u5w/6NT7Fqxd3i9t6/lrcV4uI3fEGm5m5sj/1WScCAMCJ5KPUT0TEZ4rx/1LMFaO5wvCQbmH62QEAAADjkL2xGP9MIjIAAADg1HojIhYjSRvluQCLkaaNRv8c3k/FE2m70+197lpn78ZmPi9iOerpte1260p5Tu1y1JN8eqWofzT98tD0akQ8FRHfXzpXTDc2Ou3NWe/8AAAAgDPi/ND2/9+X+tv/AAAAwCmzPOsEAAAAgIkbtf2fTDkPAAAAYHIc/wcAAIBT7WtvvZWXbHD968139veud965vNnqXm/s7G00Njq7Nxtbnc5W8Zt9O8ctqx4R7U7n5hci9m41e61ur9ndP7i609m70bu67fqBAAAAMCtPPX/nbhIRh188V5TcfH4zN+IJzhWAUyMd0V75Mf/9ZHMBpmvU1/wJzI8zD2D6arNOAJidw1knAMzaAz/1UTEoOHryzgP7DH41uZwAAIDxuvjpO3e/XXH8v1aezw+cXqOO/wOn3yMc/89l48oDmD7H/+HsqsdctnTiR9+eaC7AbDzsUh8jf7yj6vh/5ZnBWfbQZQEAABO1WJTn00Z5LHAx0rTRiHiy+B/genJtu926EhEfj4jfLNU/lk+vFM9MXB4QAAAAAAAAAAAAAAAAAAAAAAAAAE4oy5LIAAAAgFMtIv1jUl7/6+LShcXh/QPzyT+KywPOR8S7P3r7h7fWe73dlbz9r/fbe++X7S/PYg8GAAAAnEW1Y+cOttMH2/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAME4f3ntvY1CmGffPX4qI5ar4tVgo7heiHhFP/C2J2pHnJRExN4b4h7cj4umq+EmeViyXWQzHTyPi3HTiP5tlWWX882OID2fZnXz982bV5y+NF4r76s9/rSyP6oH13/zPj8xJ76//5kas/548YYxnPvhZc2T82xHP1KrXP4P4yYj4L1YtsOJF+eY3Dg7+q7G/8Mh+HHGx8vsneSBWs7dzs9ndP7i8vbO+1dpq3VhdXXl17bW1V9auNK9tt1vlbVWI+N6zv/j3UPR/ZX1F/6MfP6rWv8f1/0JeqR9pzIbDlME+uHXvk/1qfWgRRfxLL1a//54+Jn7+nvhs+T2Qz784qB/260c999NfP1eZWBl/c8Tr/7C//6VRCx3y0te/87sTPhQAmILBKGu3u39wfb3dbk2s8n6WZRMO8X9UIj3pg4vhYkTMPufJVGqTficsPC49nXLlwuORxv9SGceeLQAA4HHz0aB/1pkAAAAAAAAAAAAAAAAAAADA2dXdj3TSPyc2HPNwNl0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjWfwIAAP//nJjX8w==") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x4, 0x3f62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.845619116s ago: executing program 7 (id=4317): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.820597808s ago: executing program 3 (id=4318): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4082, &(0x7f0000000380)={[{@errors_remount}]}, 0x1, 0x4c8, &(0x7f0000000a00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 1.725573477s ago: executing program 7 (id=4319): r0 = socket(0x6, 0x800, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x25, 0x35a, &(0x7f0000000bc0)="$eJzs3U9oHGUUAPC3nSS7DcbsQSh6Wr0JUpqIB28JpUIxB60s/gNxsal/srGQxYX0kM1ehOJJ8SLoyVsPeuxZRES8efBqBamKF3srNDgyu7Ob3ezGZg8bW/r7HcLjfd+beTMZ8k1C8uXNVmxcnI1Lt27djFKpEDMrZ1fidiHKcSKS6NqNsT6aG58HAO5xt9M0/k677ja3GJ/M92JrPwDcvzrr/9sL+4niBMVXH5pGSwDAlB3x+/8XxmYvT60tAGCKsvW/FAPr/xNDwwd+zD/T/50AAOD+9dKrrz2/uhZxoVIpRWx+90Y33V/3Vy/Fu1GP9TgTi7EX3TeF6L4tZB+fO7927kwl83s5qllFsxqx2WpWu28Kq0mnvhhLsRjlvD7t1ydZ/VKnvhIRu61mtVNfaFZnYz4//y/zsR7LsRiPjNRHnF87t1zJD1Dd7NW3ItpR6l1E1v/pWIyf3orLUY+LkdXu97+zVKmcTdeG6pvXip15AAAAAAAAAAAAAAAAAAAAAAAwDacrfeX+/jfpZqv54YWDE8pD++NUu8P5/kDt7v5AabG3O8/V5OD+QMP78zSrM3Hif71yAAAAAAAAAAAAAAAAAAAAuHc0tueiVq+vbzW2r2wMBq2BzPs/fPXtyegNzeSl7yX7VZEnh47Tmzhw5CT6p0j75WkyNCcPkoje5N3atev9jgfnFPtXMVKeBcWRoULeU61eX3j8t8/HVf2TBbudTBIjt2U4KOTnHxjafDhLlCJi77Cqw4Plu8y5kabpYeU7n41WRSFiJiZu4wjB9zffefTpxqlnOplv8k0fnnxq8eUbn37550atHu3unanX57Yae+kRjpz1OjqUDDw/hfw+F8Y8CeOD9n6mvdXYriU///XKYx//eGByMv75SQczHxx+rq8PZua6QSGi3LsJ/9Xq7JiHf3zw+p3+0zv5J+7UFyu16zu//nHUqoEvEjbqAAAAAAAAAAAAAAAAAACAYzHwt+ITePbF6XUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMdv////L0REJ9i+0q7lwcYkwZ1WjA4V17cah5785LFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7B/AwAA//8ysG5J") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0xfffffff7}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000000000001010000004e230005000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r11 = dup(r3) bind$unix(r11, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x240440c8) 1.68510795s ago: executing program 0 (id=4320): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x700, 'pimreg1\x00', {0x2}, 0xfffd}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000ffffff3f18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018460000ffffffff000000000000000085000000030000001858000004000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.599862988s ago: executing program 7 (id=4321): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000041ffffff0000008000000000691dd524c0ec031207000000010000007d5b6e861807aef70d48ff114ca107359d9639218120d18792cd0598c521d7d3c9184d161335ec291f2f06cb7990f4f586e1e19acda2cbef91468fb10d87f35801000000beed6ad28f250c2348701753162e609f721c77ffedb3838dbd0775e50978eb15054f5d72db6817b9b3636e80503db1dc2f27024d920b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffff9}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), 0x0}, 0x20) syslog(0x2, &(0x7f0000000380)=""/96, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f00000004c0), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x8040600) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) 1.46433157s ago: executing program 3 (id=4322): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) 1.376991488s ago: executing program 3 (id=4323): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000001600)=""/4096, &(0x7f0000000000)=0x1000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000007380), 0x200c41, 0x0) connect$unix(r2, &(0x7f0000008800)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x3}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x20008000) setns(r6, 0x66020000) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000008580)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/72, 0x48}], 0x2, &(0x7f0000000180)=""/113, 0x71}, 0x1}, {{&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/99, 0x63}], 0x4, &(0x7f00000006c0)=""/171, 0xab}, 0xfffffffa}, {{&(0x7f0000000780)=@isdn, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000800)=""/87, 0x57}, {&(0x7f0000000880)=""/70, 0x46}, {&(0x7f0000000900)=""/107, 0x6b}, {&(0x7f0000001ac0)=""/245, 0xf5}, {&(0x7f0000001bc0)=""/204, 0xcc}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/85, 0x55}, {&(0x7f0000002cc0)=""/147, 0x93}], 0x8}, 0xfffffff9}, {{&(0x7f0000002e00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002e80)=""/98, 0x62}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/135, 0x87}, {&(0x7f0000003fc0)=""/115, 0x73}, {&(0x7f0000004040)=""/222, 0xde}, {&(0x7f0000004140)=""/6, 0x6}, {&(0x7f0000004180)=""/158, 0x9e}, {&(0x7f0000004240)=""/47, 0x2f}], 0x8, &(0x7f0000004300)=""/86, 0x56}, 0x3}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000004380)=""/29, 0x1d}, {&(0x7f00000043c0)=""/195, 0xc3}, {&(0x7f00000044c0)=""/248, 0xf8}, {&(0x7f00000045c0)=""/97, 0x61}, {&(0x7f0000004640)=""/41, 0x29}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/233, 0xe9}, {&(0x7f0000005780)=""/28, 0x1c}], 0x8, &(0x7f0000005840)=""/182, 0xb6}, 0x1112}, {{&(0x7f0000005900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000006c40)=[{&(0x7f0000005980)=""/150, 0x96}, {&(0x7f0000005a40)=""/44, 0x2c}, {&(0x7f0000005a80)=""/1, 0x1}, {&(0x7f0000005ac0)=""/216, 0xd8}, {&(0x7f0000005bc0)=""/10, 0xa}, {&(0x7f0000005c00)=""/34, 0x22}, {&(0x7f0000005c40)=""/4096, 0x1000}], 0x7, &(0x7f0000006cc0)=""/128, 0x80}, 0x5}, {{&(0x7f0000006d40)=@alg, 0x80, &(0x7f0000007140)=[{&(0x7f0000006dc0)=""/175, 0xaf}, {&(0x7f0000006e80)=""/161, 0xa1}, {&(0x7f0000006f40)=""/64, 0x40}, {&(0x7f0000006f80)=""/123, 0x7b}, {&(0x7f0000007000)=""/254, 0xfe}, {&(0x7f0000007100)=""/28, 0x1c}], 0x6}, 0x401}, {{&(0x7f00000071c0)=@ax25={{0x3, @default}, [@bcast, @bcast, @null, @null, @bcast, @netrom, @bcast, @default]}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007240)=""/165, 0xa5}, {&(0x7f0000007300)=""/44, 0x2c}], 0x2, &(0x7f0000007380)}, 0xf57}, {{&(0x7f00000073c0)=@nfc, 0x80, &(0x7f0000008540)=[{&(0x7f0000007440)=""/152, 0x98}, {&(0x7f0000007500)=""/5, 0x5}, {&(0x7f0000007540)=""/4096, 0x1000}], 0x3}, 0x5}], 0x9, 0x0, &(0x7f00000087c0)={0x0, 0x3938700}) 1.376545918s ago: executing program 4 (id=4324): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000100)) 1.189828925s ago: executing program 4 (id=4325): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x80, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.162602747s ago: executing program 7 (id=4326): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 1.147510778s ago: executing program 8 (id=4327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.059693456s ago: executing program 7 (id=4328): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de8500"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 728.316406ms ago: executing program 8 (id=4329): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 364.118178ms ago: executing program 3 (id=4330): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) 312.692493ms ago: executing program 0 (id=4331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000001000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001040)={0x0, @private, @loopback}, &(0x7f0000001080)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000010c0)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private2, 0x8, r9}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@private2, r9}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x78, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x78}}, 0x1) 249.533528ms ago: executing program 3 (id=4332): r0 = socket(0x6, 0x800, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x25, 0x35a, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0xfffffff7}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000000000001010000004e230005000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r11 = dup(r3) bind$unix(r11, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x240440c8) 172.277855ms ago: executing program 0 (id=4333): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'vcan0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="0e", 0x1}, {0x0, 0x500}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x40c0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000f00)={[{@nolazytime}, {@abort}, {@dioread_nolock}, {@mblk_io_submit}, {@noauto_da_alloc}], [{@uid_gt}, {@fowner_gt}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0xde, 0x53b, &(0x7f00000014c0)="$eJzs3c1vI2cZAPBnJnbIdlOSAodSqR+ii3YrWHvT0Dbi0BaBuFUClfsSJd4oWme9ip12E1WQFX8AEkJQiRMnLkjcuCCh/RMQUiX2jgCBEGzhwAEYNOPxNmvG2cD6Y5X8ftJrv/OOPc/zOvb4nY94AjizXoiINyNiLiJeioilsj0tSxz2S/64D++9t5GXvPntvySRlG0RRfW+8+XTFvp3lbr7B9fX2+3Wbjnd7O3cbHb3Dy5v76xvtbZaN1ZXV15de23tlbUrY+ln3q/Xv/KHH3z3J199/Zeff/e3V/906Vt50l8u5w/6NT7Fqxd3i9t6/lrcV4uI3fEGm5m5sj/1WScCAMCJ5KPUT0TEZ4rx/1LMFaO5wvCQbmH62QEAAADjkL2xGP9MIjIAAADg1HojIhYjSRvluQCLkaaNRv8c3k/FE2m70+197lpn78ZmPi9iOerpte1260p5Tu1y1JN8eqWofzT98tD0akQ8FRHfXzpXTDc2Ou3NWe/8AAAAgDPi/ND2/9+X+tv/AAAAwCmzPOsEAAAAgIkbtf2fTDkPAAAAYHIc/wcAAIBT7WtvvZWXbHD968139veud965vNnqXm/s7G00Njq7Nxtbnc5W8Zt9O8ctqx4R7U7n5hci9m41e61ur9ndP7i609m70bu67fqBAAAAMCtPPX/nbhIRh188V5TcfH4zN+IJzhWAUyMd0V75Mf/9ZHMBpmvU1/wJzI8zD2D6arNOAJidw1knAMzaAz/1UTEoOHryzgP7DH41uZwAAIDxuvjpO3e/XXH8v1aezw+cXqOO/wOn3yMc/89l48oDmD7H/+HsqsdctnTiR9+eaC7AbDzsUh8jf7yj6vh/5ZnBWfbQZQEAABO1WJTn00Z5LHAx0rTRiHiy+B/genJtu926EhEfj4jfLNU/lk+vFM9MXB4QAAAAAAAAAAAAAAAAAAAAAAAAAE4oy5LIAAAAgFMtIv1jUl7/6+LShcXh/QPzyT+KywPOR8S7P3r7h7fWe73dlbz9r/fbe++X7S/PYg8GAAAAnEW1Y+cOttMH2/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAME4f3ntvY1CmGffPX4qI5ar4tVgo7heiHhFP/C2J2pHnJRExN4b4h7cj4umq+EmeViyXWQzHTyPi3HTiP5tlWWX882OID2fZnXz982bV5y+NF4r76s9/rSyP6oH13/zPj8xJ76//5kas/548YYxnPvhZc2T82xHP1KrXP4P4yYj4L1YtsOJF+eY3Dg7+q7G/8Mh+HHGx8vsneSBWs7dzs9ndP7i8vbO+1dpq3VhdXXl17bW1V9auNK9tt1vlbVWI+N6zv/j3UPR/ZX1F/6MfP6rWv8f1/0JeqR9pzIbDlME+uHXvk/1qfWgRRfxLL1a//54+Jn7+nvhs+T2Qz784qB/260c999NfP1eZWBl/c8Tr/7C//6VRCx3y0te/87sTPhQAmILBKGu3u39wfb3dbk2s8n6WZRMO8X9UIj3pg4vhYkTMPufJVGqTficsPC49nXLlwuORxv9SGceeLQAA4HHz0aB/1pkAAAAAAAAAAAAAAAAAAADA2dXdj3TSPyc2HPNwNl0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjWfwIAAP//nJjX8w==") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x4, 0x3f62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 95.792352ms ago: executing program 0 (id=4334): r0 = socket(0x6, 0x800, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x25, 0x35a, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0xfffffff7}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c00000008"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000000000001010000004e230005000000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r11 = dup(r3) bind$unix(r11, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x240440c8) 19.025019ms ago: executing program 0 (id=4335): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x63a2, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000600)={0x49, 0x29, 0x1, {0x4, [{{0x20, 0x3, 0x6}, 0x0, 0x6, 0x7, './file1'}, {{0x4, 0x3, 0x5}, 0x2, 0x8, 0x7, './file1'}]}}, 0x49) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {0x0, 0xeffd}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=4336): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xa7, &(0x7f00000001c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x88e7, "000336594f86aa7c6c42009312b7fb379fe4a3531a2888d1081add72f132f0a08b60526b723e998f3132c15b1f5ae394cc9348b5fce4b6940b2c3e22d5325fabbbd4a6ece935fae3933142ac6b4b17d0483e36d2ffeff10fdc329f6e49fce62330deb977b2e0cad61c26dda923846c8d7d7b243721657c2625ed70e387b50c1697e2fa775d43dcca72a9bbe328caf772adeee97e6d"}}}, &(0x7f0000000040)={0x0, 0x1, [0x84d, 0x75c, 0x1b6, 0xe77]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x190) fcntl$setlease(r4, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1, 0xa8) close_range(r3, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x65, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.4.3706'. [ 362.284137][T14493] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 362.535859][T14514] lo speed is unknown, defaulting to 1000 [ 362.554408][T14516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 362.596299][T14500] gretap0: refused to change device tx_queue_len [ 362.603263][T14500] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 362.613490][T14522] loop6: detected capacity change from 0 to 512 [ 362.683690][T14522] journal_path: Non-blockdev passed as './bus' [ 362.690076][T14522] EXT4-fs: error: could not find journal device path [ 362.741019][T14514] lo speed is unknown, defaulting to 1000 [ 362.766923][T14531] loop3: detected capacity change from 0 to 512 [ 362.822370][T14531] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 362.833979][T14531] System zones: 0-2, 18-18, 34-34 [ 362.874460][T14531] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3720: bg 0: block 248: padding at end of block bitmap is not set [ 362.911279][T14531] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3720: Failed to acquire dquot type 1 [ 362.979321][T14531] EXT4-fs (loop3): 1 truncate cleaned up [ 362.992351][T14531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.019636][T14531] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.084409][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 363.084430][ T29] audit: type=1326 audit(1767557378.000:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.183226][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.202460][ T29] audit: type=1326 audit(1767557378.030:8696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.226162][ T29] audit: type=1326 audit(1767557378.030:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.249812][ T29] audit: type=1326 audit(1767557378.030:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.273441][ T29] audit: type=1326 audit(1767557378.030:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.297038][ T29] audit: type=1326 audit(1767557378.030:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.320653][ T29] audit: type=1326 audit(1767557378.030:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.344315][ T29] audit: type=1326 audit(1767557378.030:8702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.367897][ T29] audit: type=1326 audit(1767557378.030:8703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.391518][ T29] audit: type=1326 audit(1767557378.030:8704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.3722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 363.466452][T14551] syz1: rxe_newlink: already configured on lo [ 363.481113][T14551] loop4: detected capacity change from 0 to 2048 [ 363.527350][T14551] loop4: p3 p4 < > [ 363.531311][T14551] loop4: p3 size 861184 extends beyond EOD, truncated [ 363.678551][T14557] syz1: rxe_newlink: already configured on lo [ 363.755426][T14558] loop4: detected capacity change from 0 to 2048 [ 363.815726][T14558] loop4: p3 p4 < > [ 363.819738][T14558] loop4: p3 size 861184 extends beyond EOD, truncated [ 364.018717][T14562] loop3: detected capacity change from 0 to 512 [ 364.035085][T14562] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 364.045029][T14568] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3733'. [ 364.068065][T14569] loop4: detected capacity change from 0 to 512 [ 364.074991][T14569] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 364.083636][T14569] EXT4-fs (loop4): invalid journal inode [ 364.171507][T14562] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 364.270322][T14573] loop0: detected capacity change from 0 to 512 [ 364.414703][T14573] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 364.544832][T14573] System zones: 0-2, 18-18, 34-34 [ 364.551527][T14573] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3735: bg 0: block 248: padding at end of block bitmap is not set [ 364.606255][T14573] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3735: Failed to acquire dquot type 1 [ 364.657637][T14573] EXT4-fs (loop0): 1 truncate cleaned up [ 364.689828][T14573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.739092][T14573] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.872846][T11297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.971468][T14588] lo speed is unknown, defaulting to 1000 [ 364.990344][T14589] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 365.004925][T14589] loop0: detected capacity change from 0 to 512 [ 365.017951][T14589] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 365.045342][T14589] EXT4-fs (loop0): 1 truncate cleaned up [ 365.059260][T14589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.202604][T14588] lo speed is unknown, defaulting to 1000 [ 365.566656][T14613] bridge0: entered promiscuous mode [ 365.592482][T14615] validate_nla: 3 callbacks suppressed [ 365.592502][T14615] netlink: 'syz.6.3748': attribute type 10 has an invalid length. [ 365.613064][T14613] macsec1: entered promiscuous mode [ 365.620477][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3748'. [ 365.831725][T14629] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 365.847226][T14629] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 365.866367][T14629] EXT4-fs (loop3): 1 truncate cleaned up [ 366.026428][T14629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.595341][T14636] set_capacity_and_notify: 1 callbacks suppressed [ 366.595364][T14636] loop6: detected capacity change from 0 to 256 [ 366.624615][T14636] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 366.670304][T14636] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3754'. [ 366.781065][ T3935] usb usb6-port1: attempt power cycle [ 366.976962][T14645] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 367.120056][T14650] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 367.157024][T14650] loop6: detected capacity change from 0 to 512 [ 367.178996][T14650] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 367.206488][T14650] EXT4-fs (loop6): 1 truncate cleaned up [ 367.220471][T14650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.554098][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3761'. [ 367.575301][T14654] bridge0: entered promiscuous mode [ 367.589112][T14654] macsec1: entered promiscuous mode [ 367.758789][T14656] 9p: Bad value for 'rfdno' [ 367.900086][T14658] lo speed is unknown, defaulting to 1000 [ 367.957060][T14658] lo speed is unknown, defaulting to 1000 [ 368.610182][T14668] syz1: rxe_newlink: already configured on lo [ 368.637639][T14668] loop4: detected capacity change from 0 to 2048 [ 368.644348][ T3935] usb usb6-port1: unable to enumerate USB device [ 368.671561][T11297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.710405][T14668] loop4: p3 p4 < > [ 368.729947][T14668] loop4: p3 size 861184 extends beyond EOD, truncated [ 368.829458][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 368.829477][ T29] audit: type=1400 audit(1767557383.740:8856): avc: denied { watch } for pid=14671 comm="syz.4.3769" path="/106" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 368.938664][T14674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 368.959188][ T29] audit: type=1326 audit(1767557383.870:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 368.982768][ T29] audit: type=1326 audit(1767557383.870:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f568e6f2005 code=0x7ffc0000 [ 369.006524][ T29] audit: type=1326 audit(1767557383.870:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 369.097835][ T29] audit: type=1326 audit(1767557383.940:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 369.121497][ T29] audit: type=1326 audit(1767557383.940:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f568e6f2005 code=0x7ffc0000 [ 369.145248][ T29] audit: type=1326 audit(1767557383.950:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f568e6f2005 code=0x7ffc0000 [ 369.168928][ T29] audit: type=1326 audit(1767557383.960:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f568e6f2005 code=0x7ffc0000 [ 369.192476][ T29] audit: type=1326 audit(1767557383.960:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 369.215994][ T29] audit: type=1326 audit(1767557383.970:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14671 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f568e6f2005 code=0x7ffc0000 [ 369.282563][T14678] lo speed is unknown, defaulting to 1000 [ 369.335189][T14679] loop0: detected capacity change from 0 to 1024 [ 369.366332][T14679] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 369.440527][T14678] lo speed is unknown, defaulting to 1000 [ 369.904685][T14693] loop0: detected capacity change from 0 to 256 [ 369.911527][T14693] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 369.924907][T14693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3774'. [ 370.248538][T14700] lo speed is unknown, defaulting to 1000 [ 370.273198][T14712] lo speed is unknown, defaulting to 1000 [ 370.319955][T14700] lo speed is unknown, defaulting to 1000 [ 370.417400][T14712] lo speed is unknown, defaulting to 1000 [ 370.514979][T14700] chnl_net:caif_netlink_parms(): no params data found [ 370.576384][T14700] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.583595][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.591178][T14700] bridge_slave_0: entered allmulticast mode [ 370.598747][T14700] bridge_slave_0: entered promiscuous mode [ 370.600506][ T4027] usb usb6-port1: attempt power cycle [ 370.608118][T14700] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.617186][T14700] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.624834][T14700] bridge_slave_1: entered allmulticast mode [ 370.631616][T14700] bridge_slave_1: entered promiscuous mode [ 370.654270][T14700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.665399][T14700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.689819][T14700] team0: Port device team_slave_0 added [ 370.716219][T14700] team0: Port device team_slave_1 added [ 370.749503][T14700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.756548][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.782624][T14700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.814967][T14700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.821994][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.847995][T14700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.882956][T14700] hsr_slave_0: entered promiscuous mode [ 370.894739][T14700] hsr_slave_1: entered promiscuous mode [ 370.903201][T14700] debugfs: 'hsr0' already exists in 'hsr' [ 370.909096][T14700] Cannot create hsr debugfs directory [ 370.917533][T14721] lo speed is unknown, defaulting to 1000 [ 370.927655][T14722] loop0: detected capacity change from 0 to 512 [ 370.957342][T14722] journal_path: Non-blockdev passed as './bus' [ 370.963650][T14722] EXT4-fs: error: could not find journal device path [ 371.030423][T14721] lo speed is unknown, defaulting to 1000 [ 371.098593][T14700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 371.115913][T14700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 371.133313][T14700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 371.162816][T14700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 371.258244][T14700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.272843][T14700] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.289757][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.296930][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.311956][T14735] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 371.324399][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.331515][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.528764][T14700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.748810][T14700] veth0_vlan: entered promiscuous mode [ 371.763289][T14700] veth1_vlan: entered promiscuous mode [ 371.781702][T14700] veth0_macvtap: entered promiscuous mode [ 371.790202][T14700] veth1_macvtap: entered promiscuous mode [ 371.812644][T14700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.826354][T14700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.840387][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.866566][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 371.872872][ T4343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.896308][ T1470] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.913407][ T1470] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.922480][ T1470] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.003164][T14763] loop7: detected capacity change from 0 to 256 [ 372.009872][T14763] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 372.023077][T14763] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3785'. [ 372.073454][T14768] netlink: 'syz.7.3787': attribute type 10 has an invalid length. [ 372.084073][T14768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.092496][T14768] team0: Port device bond0 added [ 372.101886][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3787'. [ 372.116212][T14768] team0 (unregistering): Port device team_slave_0 removed [ 372.125754][T14768] team0 (unregistering): Port device team_slave_1 removed [ 372.135446][T14768] team0 (unregistering): Port device bond0 removed [ 372.464300][ T4027] usb usb6-port1: unable to enumerate USB device [ 372.482785][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.492156][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.526031][T14777] loop3: detected capacity change from 0 to 512 [ 372.531639][T14779] loop6: detected capacity change from 0 to 512 [ 372.547934][T14777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 372.673410][T14777] System zones: 0-2, 18-18, 34-34 [ 372.686275][T14777] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3792: bg 0: block 248: padding at end of block bitmap is not set [ 372.702725][T14779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 372.711124][T14779] System zones: 0-2, 18-18, 34-34 [ 372.717151][T14779] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3791: bg 0: block 248: padding at end of block bitmap is not set [ 372.731729][T14777] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3792: Failed to acquire dquot type 1 [ 372.761717][T14777] EXT4-fs (loop3): 1 truncate cleaned up [ 372.769792][T14779] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3791: Failed to acquire dquot type 1 [ 372.789982][T14777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.824517][T14779] EXT4-fs (loop6): 1 truncate cleaned up [ 372.832688][T14777] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.846312][T14779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.892325][T14779] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.931579][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.978300][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.052982][T14794] netlink: 'syz.3.3795': attribute type 10 has an invalid length. [ 373.061328][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3795'. [ 373.330725][T14811] loop3: detected capacity change from 0 to 512 [ 373.345619][T14811] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 373.349515][T14811] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 373.453647][T14821] netlink: 'syz.0.3807': attribute type 3 has an invalid length. [ 373.453688][T14821] netlink: 'syz.0.3807': attribute type 3 has an invalid length. [ 373.577054][T14825] netlink: 'syz.0.3808': attribute type 10 has an invalid length. [ 373.585347][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'. [ 373.711773][T14842] lo speed is unknown, defaulting to 1000 [ 373.732990][T14822] netlink: 'syz.3.3806': attribute type 13 has an invalid length. [ 373.749840][T14822] gretap0: refused to change device tx_queue_len [ 373.757283][T14822] net_ratelimit: 2 callbacks suppressed [ 373.757366][T14822] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 373.781242][T14846] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 373.799613][T14845] loop7: detected capacity change from 0 to 512 [ 373.808403][T14846] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.825098][T14845] journal_path: Non-blockdev passed as './bus' [ 373.831325][T14845] EXT4-fs: error: could not find journal device path [ 373.847082][T14822] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.853539][T14822] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.866516][T14849] loop0: detected capacity change from 0 to 512 [ 373.873735][T14849] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 373.887237][T14846] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.906530][T14849] EXT4-fs (loop0): 1 truncate cleaned up [ 373.912819][T14849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.933404][T14842] lo speed is unknown, defaulting to 1000 [ 373.955192][T14853] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 373.979033][T14853] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.015741][T14846] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.029387][T14855] loop4: detected capacity change from 0 to 512 [ 374.069048][T14855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 374.114647][T14853] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.126960][T14855] EXT4-fs (loop4): 1 truncate cleaned up [ 374.133207][T14855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.162413][T14846] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.241447][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.250159][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.258749][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.272192][T14853] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.308474][T14863] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 374.319296][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.372793][T14853] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.396632][T14865] netlink: 'syz.6.3818': attribute type 3 has an invalid length. [ 374.405058][T14865] netlink: 'syz.6.3818': attribute type 3 has an invalid length. [ 374.447980][T14859] netlink: 'syz.7.3816': attribute type 13 has an invalid length. [ 374.458262][T14859] gretap0: refused to change device tx_queue_len [ 374.465349][T14859] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 374.489039][ T2102] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.498561][T14859] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 374.501992][T14869] netlink: 'syz.6.3819': attribute type 10 has an invalid length. [ 374.504975][T14859] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.530864][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3819'. [ 374.550894][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.561645][ T2102] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.573266][ T2102] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.658391][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3821'. [ 374.709632][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 374.709650][ T29] audit: type=1326 audit(1767557389.620:9347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.751334][ T29] audit: type=1326 audit(1767557389.650:9348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.774989][ T29] audit: type=1326 audit(1767557389.650:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.798617][ T29] audit: type=1326 audit(1767557389.650:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.822233][ T29] audit: type=1326 audit(1767557389.650:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.845949][ T29] audit: type=1326 audit(1767557389.650:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.869546][ T29] audit: type=1326 audit(1767557389.650:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.893066][ T29] audit: type=1326 audit(1767557389.650:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.916653][ T29] audit: type=1326 audit(1767557389.650:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 374.941045][ T29] audit: type=1326 audit(1767557389.650:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.6.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84b7ff749 code=0x7ffc0000 [ 375.039953][T14887] lo speed is unknown, defaulting to 1000 [ 375.084104][T14887] lo speed is unknown, defaulting to 1000 [ 375.099012][T14888] loop6: detected capacity change from 0 to 512 [ 375.116089][T14888] journal_path: Non-blockdev passed as './bus' [ 375.122313][T14888] EXT4-fs: error: could not find journal device path [ 375.212501][T14897] rdma_rxe: rxe_newlink: failed to add lo [ 375.227225][T14897] loop7: detected capacity change from 0 to 2048 [ 375.271788][T14897] loop7: p3 p4 < > [ 375.287881][T14900] FAULT_INJECTION: forcing a failure. [ 375.287881][T14900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.296409][T14897] loop7: p3 size 861184 extends beyond EOD, truncated [ 375.301196][T14900] CPU: 1 UID: 0 PID: 14900 Comm: syz.6.3829 Not tainted syzkaller #0 PREEMPT(voluntary) [ 375.301287][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.301390][T14900] Call Trace: [ 375.301411][T14900] [ 375.301433][T14900] __dump_stack+0x1d/0x30 [ 375.301512][T14900] dump_stack_lvl+0x95/0xd0 [ 375.301575][T14900] dump_stack+0x15/0x1b [ 375.301644][T14900] should_fail_ex+0x265/0x280 [ 375.301789][T14900] should_fail+0xb/0x20 [ 375.301850][T14900] should_fail_usercopy+0x1a/0x20 [ 375.302007][T14900] _copy_to_user+0x20/0xa0 [ 375.302089][T14900] simple_read_from_buffer+0xb5/0x130 [ 375.302159][T14900] proc_fail_nth_read+0x10e/0x150 [ 375.302251][T14900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.302416][T14900] vfs_read+0x1a8/0x770 [ 375.302470][T14900] ? __rcu_read_unlock+0x4f/0x70 [ 375.302614][T14900] ? __fget_files+0x184/0x1c0 [ 375.302716][T14900] ? mutex_lock+0x58/0x90 [ 375.302804][T14900] ksys_read+0xda/0x1a0 [ 375.302874][T14900] __x64_sys_read+0x40/0x50 [ 375.302935][T14900] x64_sys_call+0x2889/0x3000 [ 375.303060][T14900] do_syscall_64+0xca/0x2b0 [ 375.303173][T14900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.303248][T14900] RIP: 0033:0x7fc84b7fe15c [ 375.303304][T14900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 375.303367][T14900] RSP: 002b:00007fc84a25f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.303437][T14900] RAX: ffffffffffffffda RBX: 00007fc84ba55fa0 RCX: 00007fc84b7fe15c [ 375.303478][T14900] RDX: 000000000000000f RSI: 00007fc84a25f0a0 RDI: 0000000000000004 [ 375.303538][T14900] RBP: 00007fc84a25f090 R08: 0000000000000000 R09: 0000000000000000 [ 375.303570][T14900] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 375.303636][T14900] R13: 00007fc84ba56038 R14: 00007fc84ba55fa0 R15: 00007ffed6ae2928 [ 375.303730][T14900] [ 375.542619][T14905] loop6: detected capacity change from 0 to 512 [ 375.599773][T14905] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 375.608057][T14905] System zones: 0-2, 18-18, 34-34 [ 375.614202][T14913] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3834'. [ 375.624730][T14905] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3831: bg 0: block 248: padding at end of block bitmap is not set [ 375.653530][T14905] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3831: Failed to acquire dquot type 1 [ 375.668672][T14905] EXT4-fs (loop6): 1 truncate cleaned up [ 375.674940][T14905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.687735][T14905] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.704303][ T3427] usb usb6-port1: attempt power cycle [ 375.716064][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.786727][T14920] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 375.794891][T14920] System zones: 0-2, 18-18, 34-34 [ 375.800860][T14920] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3837: bg 0: block 248: padding at end of block bitmap is not set [ 375.815627][T14920] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3837: Failed to acquire dquot type 1 [ 375.827663][T14920] EXT4-fs (loop6): 1 truncate cleaned up [ 375.833840][T14920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.846720][T14920] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.879032][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.910055][T14924] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3838: corrupted in-inode xattr: e_value size too large [ 375.931545][T14924] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3838: couldn't read orphan inode 15 (err -117) [ 375.946299][T14924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.000689][T14924] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3838: bg 0: block 8: invalid block bitmap [ 376.106174][T13922] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=768, size=1024 fake=0 [ 376.142708][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.475634][T14927] lo speed is unknown, defaulting to 1000 [ 376.519349][T14927] lo speed is unknown, defaulting to 1000 [ 376.642086][T14942] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 376.654432][T14942] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 376.671622][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 376.677756][ T4343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 376.700145][T14945] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3845'. [ 376.720344][T14927] chnl_net:caif_netlink_parms(): no params data found [ 376.797067][T14927] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.804290][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.811698][T14927] bridge_slave_0: entered allmulticast mode [ 376.818388][T14927] bridge_slave_0: entered promiscuous mode [ 376.825833][T14927] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.832941][T14927] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.840204][T14927] bridge_slave_1: entered allmulticast mode [ 376.859299][T14927] bridge_slave_1: entered promiscuous mode [ 376.908964][T14927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.927895][T14927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.977113][T14927] team0: Port device team_slave_0 added [ 376.985495][T14927] team0: Port device team_slave_1 added [ 377.013801][T14927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.020911][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.046926][T14927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.061542][T14927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.068736][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.094881][T14927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.128033][T14927] hsr_slave_0: entered promiscuous mode [ 377.134746][T14927] hsr_slave_1: entered promiscuous mode [ 377.144947][T14927] debugfs: 'hsr0' already exists in 'hsr' [ 377.150709][T14927] Cannot create hsr debugfs directory [ 377.266393][T14927] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 377.284221][T14927] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 377.293558][T14927] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 377.303260][T14927] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 377.365650][T14971] set_capacity_and_notify: 4 callbacks suppressed [ 377.365674][T14971] loop3: detected capacity change from 0 to 512 [ 377.412218][T14971] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 377.415029][T14974] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3855'. [ 377.437013][T14971] EXT4-fs (loop3): invalid journal inode [ 377.479207][T14927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.522656][T14927] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.529784][ T3427] usb usb6-port1: unable to enumerate USB device [ 377.536261][T14840] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 377.543598][T14840] vhci_hcd vhci_hcd.2: invalid port number 34 [ 377.549935][T14840] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0022 l0 [ 377.575515][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.601678][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.608789][ T1904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.621645][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.628806][ T1904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.638890][T11297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.688127][T14989] lo speed is unknown, defaulting to 1000 [ 377.841004][T14927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.859639][T14989] lo speed is unknown, defaulting to 1000 [ 377.917113][T15009] loop4: detected capacity change from 0 to 2048 [ 377.980027][T15009] Alternate GPT is invalid, using primary GPT. [ 377.986418][T15009] loop4: p2 p3 p7 [ 378.114217][T15020] validate_nla: 1 callbacks suppressed [ 378.114294][T15020] netlink: 'syz.7.3867': attribute type 10 has an invalid length. [ 378.139716][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3867'. [ 378.210538][T14927] veth0_vlan: entered promiscuous mode [ 378.241121][T14927] veth1_vlan: entered promiscuous mode [ 378.254414][T15034] loop7: detected capacity change from 0 to 512 [ 378.284413][T15034] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 378.289750][T14927] veth0_macvtap: entered promiscuous mode [ 378.308756][T15038] FAULT_INJECTION: forcing a failure. [ 378.308756][T15038] name failslab, interval 1, probability 0, space 0, times 0 [ 378.321598][T15038] CPU: 1 UID: 0 PID: 15038 Comm: syz.0.3872 Not tainted syzkaller #0 PREEMPT(voluntary) [ 378.321630][T15038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.321697][T15038] Call Trace: [ 378.321704][T15038] [ 378.321714][T15038] __dump_stack+0x1d/0x30 [ 378.321739][T15038] dump_stack_lvl+0x95/0xd0 [ 378.321765][T15038] dump_stack+0x15/0x1b [ 378.321830][T15038] should_fail_ex+0x265/0x280 [ 378.321859][T15038] should_failslab+0x8c/0xb0 [ 378.321948][T15038] kmem_cache_alloc_noprof+0x69/0x4b0 [ 378.321969][T15038] ? audit_log_start+0x342/0x720 [ 378.321989][T15038] audit_log_start+0x342/0x720 [ 378.322081][T15038] ? kstrtouint+0x76/0xc0 [ 378.322107][T15038] audit_seccomp+0x48/0x100 [ 378.322153][T15038] ? __seccomp_filter+0x832/0x1260 [ 378.322309][T15038] __seccomp_filter+0x843/0x1260 [ 378.322383][T15038] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.322417][T15038] ? vfs_write+0x7e8/0x960 [ 378.322435][T15038] ? __rcu_read_unlock+0x4f/0x70 [ 378.322489][T15038] ? __fget_files+0x184/0x1c0 [ 378.322581][T15038] __secure_computing+0x82/0x150 [ 378.322683][T15038] syscall_trace_enter+0xcf/0x1e0 [ 378.322710][T15038] do_syscall_64+0xa4/0x2b0 [ 378.322743][T15038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.322763][T15038] RIP: 0033:0x7fb4f9e1f749 [ 378.322859][T15038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.322883][T15038] RSP: 002b:00007fb4f887f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 378.322906][T15038] RAX: ffffffffffffffda RBX: 00007fb4fa075fa0 RCX: 00007fb4f9e1f749 [ 378.322942][T15038] RDX: 000000000000001c RSI: 0000200000000000 RDI: ffffffffffffffff [ 378.322968][T15038] RBP: 00007fb4f887f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.322985][T15038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.322999][T15038] R13: 00007fb4fa076038 R14: 00007fb4fa075fa0 R15: 00007fff1133b048 [ 378.323020][T15038] [ 378.327855][T14927] veth1_macvtap: entered promiscuous mode [ 378.536761][T15034] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 378.621069][T14927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.630741][T14927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.671942][ T1470] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.686799][ T1470] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.757328][T15059] netlink: 'syz.3.3879': attribute type 10 has an invalid length. [ 378.770707][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3879'. [ 378.788962][T15063] IPv6: Can't replace route, no match found [ 378.796753][T15063] loop0: detected capacity change from 0 to 164 [ 378.820303][T15063] lo speed is unknown, defaulting to 1000 [ 378.863232][T15065] veth0_to_team: entered promiscuous mode [ 378.919575][T15068] FAULT_INJECTION: forcing a failure. [ 378.919575][T15068] name failslab, interval 1, probability 0, space 0, times 0 [ 378.932446][T15068] CPU: 1 UID: 0 PID: 15068 Comm: syz.8.3841 Not tainted syzkaller #0 PREEMPT(voluntary) [ 378.932547][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.932561][T15068] Call Trace: [ 378.932569][T15068] [ 378.932579][T15068] __dump_stack+0x1d/0x30 [ 378.932604][T15068] dump_stack_lvl+0x95/0xd0 [ 378.932639][T15068] dump_stack+0x15/0x1b [ 378.932663][T15068] should_fail_ex+0x265/0x280 [ 378.932693][T15068] should_failslab+0x8c/0xb0 [ 378.932756][T15068] __kmalloc_noprof+0xb9/0x5a0 [ 378.932778][T15068] ? memcg_list_lru_alloc+0x2e5/0x4c0 [ 378.932883][T15068] memcg_list_lru_alloc+0x2e5/0x4c0 [ 378.932955][T15068] __memcg_slab_post_alloc_hook+0x1aa/0x530 [ 378.933021][T15068] kmem_cache_alloc_lru_noprof+0x2cc/0x4c0 [ 378.933046][T15068] ? __d_alloc+0x37/0x340 [ 378.933082][T15068] __d_alloc+0x37/0x340 [ 378.933115][T15068] ? mpol_shared_policy_init+0xbd/0x4c0 [ 378.933184][T15068] d_alloc_pseudo+0x1e/0x80 [ 378.933220][T15068] alloc_file_pseudo+0x71/0x160 [ 378.933261][T15068] __shmem_file_setup+0x1de/0x210 [ 378.933327][T15068] shmem_file_setup+0x3b/0x50 [ 378.933354][T15068] __se_sys_memfd_create+0x2f7/0x6b0 [ 378.933465][T15068] __x64_sys_memfd_create+0x31/0x40 [ 378.933506][T15068] x64_sys_call+0x28cb/0x3000 [ 378.933532][T15068] do_syscall_64+0xca/0x2b0 [ 378.933576][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.933649][T15068] RIP: 0033:0x7f2dad4df749 [ 378.933666][T15068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.933723][T15068] RSP: 002b:00007f2dabf3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 378.933748][T15068] RAX: ffffffffffffffda RBX: 00000000000004e0 RCX: 00007f2dad4df749 [ 378.933762][T15068] RDX: 00007f2dabf3eef0 RSI: 0000000000000000 RDI: 00007f2dad564960 [ 378.933774][T15068] RBP: 0000200000001a40 R08: 00007f2dabf3ebb7 R09: 00007f2dabf3ee40 [ 378.933785][T15068] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 378.933797][T15068] R13: 00007f2dabf3eef0 R14: 00007f2dabf3eeb0 R15: 00002000000002c0 [ 378.933815][T15068] [ 379.307622][ T1470] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.322736][T14007] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.352995][T15066] loop0: detected capacity change from 0 to 2052 [ 379.378314][T15063] lo speed is unknown, defaulting to 1000 [ 379.586756][T15090] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 379.598549][T15074] netlink: 'syz.8.3884': attribute type 13 has an invalid length. [ 379.611642][T15074] gretap0: refused to change device tx_queue_len [ 379.618754][T15074] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 379.666845][T15090] loop7: detected capacity change from 0 to 512 [ 379.711875][T15074] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 379.718341][T15074] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 379.729516][T15090] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 379.792588][T15084] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.839536][T15090] EXT4-fs (loop7): 1 truncate cleaned up [ 379.860970][T15090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.094565][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 380.094583][ T29] audit: type=1326 audit(1767557395.000:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.124489][ T29] audit: type=1326 audit(1767557395.000:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.148049][ T29] audit: type=1326 audit(1767557395.000:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.171576][ T29] audit: type=1326 audit(1767557395.000:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.195201][ T29] audit: type=1326 audit(1767557395.000:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.218962][ T29] audit: type=1326 audit(1767557395.000:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.242494][ T29] audit: type=1326 audit(1767557395.000:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.266166][ T29] audit: type=1326 audit(1767557395.000:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.289754][ T29] audit: type=1326 audit(1767557395.000:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.313515][ T29] audit: type=1326 audit(1767557395.000:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.4.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 380.383057][T15084] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.401086][T15105] ipt_ECN: cannot use operation on non-tcp rule [ 380.426586][T15105] SELinux: Context ׸ýÿX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐ r: is not valid (left unmapped). [ 380.520396][T15110] loop0: detected capacity change from 0 to 512 [ 380.538553][T15107] netlink: 'syz.3.3896': attribute type 10 has an invalid length. [ 380.589240][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 380.645317][T15110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 380.658920][T15110] System zones: 0-2, 18-18, 34-34 [ 380.675578][T15110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3897: bg 0: block 248: padding at end of block bitmap is not set [ 380.697023][T15118] loop8: detected capacity change from 0 to 512 [ 380.703409][T15110] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3897: Failed to acquire dquot type 1 [ 380.724582][T15110] EXT4-fs (loop0): 1 truncate cleaned up [ 380.765024][T15110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.828366][T15120] lo speed is unknown, defaulting to 1000 [ 380.842773][T15118] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 380.857693][T15118] System zones: 0-2, 18-18, 34-34 [ 380.863932][T15110] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.884494][T15118] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3899: bg 0: block 248: padding at end of block bitmap is not set [ 380.921996][T15118] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3899: Failed to acquire dquot type 1 [ 380.965779][T11297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.976969][T15127] Cannot find add_set index 0 as target [ 381.004279][T15118] EXT4-fs (loop8): 1 truncate cleaned up [ 381.025396][T15118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.026220][T15084] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.053344][T15118] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.176966][T15120] lo speed is unknown, defaulting to 1000 [ 381.201032][T14927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.332595][T15084] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.441252][ T10] usb usb6-port1: attempt power cycle [ 381.448333][T15148] netlink: 'syz.8.3910': attribute type 10 has an invalid length. [ 381.461225][T15148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.471832][T15148] team0: Port device bond0 added [ 381.499113][T15138] netlink: 'syz.4.3908': attribute type 13 has an invalid length. [ 381.513638][T15138] gretap0: refused to change device tx_queue_len [ 381.520796][T15138] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 381.527164][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3910'. [ 381.585796][T15145] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 381.592227][T15145] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 381.605105][T15152] team0 (unregistering): Port device team_slave_0 removed [ 381.628210][T15152] team0 (unregistering): Port device team_slave_1 removed [ 381.654760][T15152] team0 (unregistering): Port device bond0 removed [ 381.804113][T15006] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.950680][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.964202][T15160] lo speed is unknown, defaulting to 1000 [ 382.038047][T15160] lo speed is unknown, defaulting to 1000 [ 382.173719][T15006] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.360604][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.420599][T15171] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 382.454142][T15175] loop8: detected capacity change from 0 to 512 [ 382.460739][T15175] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 382.488589][T15175] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 382.602033][T15194] xt_hashlimit: max too large, truncated to 1048576 [ 382.604103][T15198] netlink: 'syz.3.3927': attribute type 10 has an invalid length. [ 382.618431][T15194] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 382.636890][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3927'. [ 382.719813][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3935'. [ 382.728903][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3935'. [ 383.028156][T15227] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.057751][T15233] loop8: detected capacity change from 0 to 512 [ 383.064308][T15230] netlink: 'syz.0.3943': attribute type 10 has an invalid length. [ 383.074937][T15228] netlink: 'syz.3.3941': attribute type 2 has an invalid length. [ 383.083359][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3943'. [ 383.099032][T15233] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 383.125043][T15227] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.175977][T15233] EXT4-fs (loop8): 1 truncate cleaned up [ 383.192582][T15233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.238517][T15237] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 383.252940][T15237] loop0: detected capacity change from 0 to 512 [ 383.260445][T15237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 383.275667][ T10] usb usb6-port1: unable to enumerate USB device [ 383.288679][T15227] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.314411][T15237] EXT4-fs (loop0): 1 truncate cleaned up [ 383.322717][T14700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.332231][T15237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.415957][T15227] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.543024][ T1904] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.595201][ T1904] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.610640][ T1904] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.625960][ T1904] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.753615][ T44] Bluetooth: hci0: sending frame failed (-49) [ 383.764755][ T4343] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 383.890775][T15286] lo speed is unknown, defaulting to 1000 [ 383.952671][T15286] lo speed is unknown, defaulting to 1000 [ 384.018395][T15291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3966'. [ 384.027682][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'. [ 384.166647][T15303] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 384.166647][T15303] program syz.4.3971 not setting count and/or reply_len properly [ 384.429008][T15320] loop4: detected capacity change from 0 to 256 [ 384.464199][T15316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 384.784654][T15339] loop4: detected capacity change from 0 to 128 [ 384.791570][T15339] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 384.809916][T15339] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 384.817909][T15339] FAT-fs (loop4): Filesystem has been set read-only [ 384.825355][T15339] bio_check_eod: 28 callbacks suppressed [ 384.825374][T15339] syz.4.3985: attempt to access beyond end of device [ 384.825374][T15339] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 384.874237][T15339] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 384.882275][T15339] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 384.900245][T15340] program syz.4.3985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.924166][T15339] syz.4.3985: attempt to access beyond end of device [ 384.924166][T15339] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 384.959689][T15339] syz.4.3985: attempt to access beyond end of device [ 384.959689][T15339] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 385.066631][T15344] netlink: 'syz.4.3987': attribute type 3 has an invalid length. [ 385.077943][T15344] netlink: 'syz.4.3987': attribute type 3 has an invalid length. [ 385.142724][T15347] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 385.238909][T15350] lo speed is unknown, defaulting to 1000 [ 385.284889][T15351] loop7: detected capacity change from 0 to 512 [ 385.296370][ T10] usb usb6-port1: attempt power cycle [ 385.298387][T15351] journal_path: Non-blockdev passed as './bus' [ 385.308213][T15351] EXT4-fs: error: could not find journal device path [ 385.325748][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 385.325763][ T29] audit: type=1326 audit(1767557400.240:9721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.363549][T15350] lo speed is unknown, defaulting to 1000 [ 385.386707][ T29] audit: type=1326 audit(1767557400.240:9722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.410361][ T29] audit: type=1326 audit(1767557400.270:9723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.434036][ T29] audit: type=1326 audit(1767557400.270:9724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.457779][ T29] audit: type=1326 audit(1767557400.290:9725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15352 comm="syz.4.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.562786][ T29] audit: type=1326 audit(1767557400.470:9726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.586432][ T29] audit: type=1326 audit(1767557400.470:9727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.610419][ T29] audit: type=1326 audit(1767557400.470:9728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.634067][ T29] audit: type=1326 audit(1767557400.470:9729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.657611][ T29] audit: type=1326 audit(1767557400.470:9730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 385.790575][T15374] loop3: detected capacity change from 0 to 256 [ 385.797256][T15374] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 385.811856][T15374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3997'. [ 385.852110][T15378] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.886042][T15378] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.898951][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3999'. [ 385.915074][T15381] program syz.3.3998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.927834][T15380] loop7: detected capacity change from 0 to 512 [ 385.934834][T15381] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 385.944500][T15380] EXT4-fs: Ignoring removed nobh option [ 385.952018][T15378] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.962018][T15380] ext4: Unknown parameter 'appraise_type' [ 386.018385][T15378] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.031784][T15370] netlink: 'syz.4.3996': attribute type 13 has an invalid length. [ 386.045082][T15370] gretap0: refused to change device tx_queue_len [ 386.052132][T15370] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 386.076457][T15370] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 386.082894][T15370] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 386.107573][T15383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 386.125946][ T1904] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.149198][ T1904] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.174138][ T1904] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.198509][ T1904] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.380137][T15392] siw: device registration error -23 [ 386.448492][T15404] loop3: detected capacity change from 0 to 256 [ 386.455203][T15404] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 386.468919][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4008'. [ 386.497392][T15408] veth0: entered promiscuous mode [ 386.530715][T15407] veth0: left promiscuous mode [ 386.720566][T15413] lo speed is unknown, defaulting to 1000 [ 386.915462][T15415] loop4: detected capacity change from 0 to 512 [ 386.930563][T15415] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 387.068706][T15415] EXT4-fs (loop4): mount failed [ 387.101185][T15413] lo speed is unknown, defaulting to 1000 [ 387.226085][ T10] usb usb6-port1: unable to enumerate USB device [ 387.281331][T14927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.304547][T11297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.373995][T15422] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15422 comm=+°ç@ [ 387.426884][T15424] iso9660: Unknown parameter '' [ 387.435612][T15424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15424 comm=syz.8.4013 [ 387.448194][T15424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15424 comm=syz.8.4013 [ 387.519431][T15430] set_capacity_and_notify: 1 callbacks suppressed [ 387.519447][T15430] loop4: detected capacity change from 0 to 512 [ 387.532561][T15430] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 387.558338][T15430] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 387.619009][T15434] loop0: detected capacity change from 0 to 256 [ 387.628712][T15434] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 387.650905][T15434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4019'. [ 387.672610][T15441] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 387.733660][T15441] loop4: detected capacity change from 0 to 512 [ 387.751228][T15441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 387.782501][T15441] EXT4-fs (loop4): 1 truncate cleaned up [ 387.793063][T15441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.821800][T15451] syzkaller0: entered promiscuous mode [ 387.827445][T15451] syzkaller0: entered allmulticast mode [ 387.835904][T15454] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.876374][T15458] loop3: detected capacity change from 0 to 512 [ 387.907320][T15458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 387.934591][T15454] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.950193][T15458] EXT4-fs (loop3): 1 truncate cleaned up [ 387.969498][T15458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.995000][T15463] loop0: detected capacity change from 0 to 128 [ 388.008510][T15463] FAT-fs (loop0): bogus logical sector size 65535 [ 388.015162][T15463] FAT-fs (loop0): Can't find a valid FAT filesystem [ 388.026087][T15454] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.114122][T15454] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.162405][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.170262][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.178051][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.185963][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.193721][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.201634][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.209562][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.217409][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.225297][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.233138][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: unknown main item tag 0x0 [ 388.243035][ T1037] hid-generic 0000:0000:FFFFFFFC.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 388.263727][T15468] loop7: detected capacity change from 0 to 512 [ 388.273323][T15468] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 388.294986][T15468] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 388.385738][T15475] loop7: detected capacity change from 0 to 256 [ 388.413504][T15475] vfat: Unknown parameter '0xffffffffffffffff0000000000000000000018446744073709551615' [ 388.486426][T15475] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4033'. [ 388.619311][T15490] netlink: 'syz.8.4038': attribute type 3 has an invalid length. [ 389.604811][T15025] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.613122][T15508] FAULT_INJECTION: forcing a failure. [ 389.613122][T15508] name failslab, interval 1, probability 0, space 0, times 0 [ 389.625944][T15508] CPU: 1 UID: 0 PID: 15508 Comm: syz.7.4043 Not tainted syzkaller #0 PREEMPT(voluntary) [ 389.626005][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.626021][T15508] Call Trace: [ 389.626029][T15508] [ 389.626038][T15508] __dump_stack+0x1d/0x30 [ 389.626138][T15508] dump_stack_lvl+0x95/0xd0 [ 389.626161][T15508] dump_stack+0x15/0x1b [ 389.626185][T15508] should_fail_ex+0x265/0x280 [ 389.626209][T15508] should_failslab+0x8c/0xb0 [ 389.626298][T15508] __kmalloc_node_noprof+0xbe/0x5c0 [ 389.626330][T15508] ? qdisc_alloc+0x65/0x410 [ 389.626360][T15508] ? up_write+0x18/0x60 [ 389.626379][T15508] qdisc_alloc+0x65/0x410 [ 389.626410][T15508] qdisc_create_dflt+0x7f/0x2d0 [ 389.626487][T15508] ? __pfx_hfsc_init_qdisc+0x10/0x10 [ 389.626523][T15508] hfsc_init_qdisc+0x164/0x230 [ 389.626614][T15508] ? __pfx_hfsc_init_qdisc+0x10/0x10 [ 389.626640][T15508] qdisc_create+0x591/0x9e0 [ 389.626668][T15508] tc_modify_qdisc+0xf9c/0x1480 [ 389.626699][T15508] ? __mutex_lock_slowpath+0xa/0x10 [ 389.626759][T15508] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 389.626784][T15508] rtnetlink_rcv_msg+0x65a/0x6d0 [ 389.626826][T15508] netlink_rcv_skb+0x123/0x220 [ 389.626862][T15508] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.626997][T15508] rtnetlink_rcv+0x1c/0x30 [ 389.627092][T15508] netlink_unicast+0x5c0/0x690 [ 389.627122][T15508] netlink_sendmsg+0x58b/0x6b0 [ 389.627226][T15508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.627264][T15508] __sock_sendmsg+0x145/0x180 [ 389.627290][T15508] ____sys_sendmsg+0x345/0x4a0 [ 389.627410][T15508] ___sys_sendmsg+0x17b/0x1d0 [ 389.627455][T15508] __sys_sendmmsg+0x178/0x300 [ 389.627528][T15508] __x64_sys_sendmmsg+0x57/0x70 [ 389.627686][T15508] x64_sys_call+0x1e28/0x3000 [ 389.627711][T15508] do_syscall_64+0xca/0x2b0 [ 389.627746][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.627813][T15508] RIP: 0033:0x7f9a0fb3f749 [ 389.627834][T15508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.627857][T15508] RSP: 002b:00007f9a0e5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 389.627904][T15508] RAX: ffffffffffffffda RBX: 00007f9a0fd95fa0 RCX: 00007f9a0fb3f749 [ 389.627918][T15508] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 389.627932][T15508] RBP: 00007f9a0e5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 389.627946][T15508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.627963][T15508] R13: 00007f9a0fd96038 R14: 00007f9a0fd95fa0 R15: 00007ffe41560938 [ 389.627984][T15508] [ 389.899345][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.919089][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.927493][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.992813][T15519] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.028457][T15518] loop0: detected capacity change from 0 to 256 [ 390.035126][T15518] vfat: Unknown parameter '0xffffffffffffffff0000000000000000000018446744073709551615' [ 390.047594][T15519] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.073664][T15525] program syz.8.4046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.084806][T15525] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 390.096510][T15518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4047'. [ 390.119629][T15527] ipt_ECN: cannot use operation on non-tcp rule [ 390.147157][T15519] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.206216][T15519] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.276388][ T897] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.288115][ T897] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.296849][ T897] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.314288][ T10] usb usb6-port1: attempt power cycle [ 390.346379][ T897] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.366064][T15537] lo speed is unknown, defaulting to 1000 [ 390.375743][T15545] loop0: detected capacity change from 0 to 512 [ 390.392621][T15545] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 390.410335][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 390.410385][ T29] audit: type=1326 audit(1767557405.320:10044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.440299][ T29] audit: type=1326 audit(1767557405.320:10045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.445396][T15545] syz!: rxe_newlink: already configured on team_slave_0 [ 390.464126][ T29] audit: type=1326 audit(1767557405.320:10046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.489772][T15537] lo speed is unknown, defaulting to 1000 [ 390.494625][ T29] audit: type=1326 audit(1767557405.320:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.494662][ T29] audit: type=1326 audit(1767557405.320:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.547625][ T29] audit: type=1326 audit(1767557405.320:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.571295][ T29] audit: type=1326 audit(1767557405.320:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.595307][ T29] audit: type=1326 audit(1767557405.320:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.618998][ T29] audit: type=1326 audit(1767557405.320:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.642756][ T29] audit: type=1326 audit(1767557405.320:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad4df749 code=0x7ffc0000 [ 390.728823][T15556] FAULT_INJECTION: forcing a failure. [ 390.728823][T15556] name failslab, interval 1, probability 0, space 0, times 0 [ 390.741629][T15556] CPU: 0 UID: 0 PID: 15556 Comm: syz.0.4059 Not tainted syzkaller #0 PREEMPT(voluntary) [ 390.741658][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.741672][T15556] Call Trace: [ 390.741679][T15556] [ 390.741757][T15556] __dump_stack+0x1d/0x30 [ 390.741788][T15556] dump_stack_lvl+0x95/0xd0 [ 390.741810][T15556] dump_stack+0x15/0x1b [ 390.741830][T15556] should_fail_ex+0x265/0x280 [ 390.741898][T15556] should_failslab+0x8c/0xb0 [ 390.741920][T15556] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 390.742010][T15556] ? __alloc_skb+0x2ff/0x4b0 [ 390.742041][T15556] __alloc_skb+0x2ff/0x4b0 [ 390.742108][T15556] ? __alloc_skb+0x228/0x4b0 [ 390.742135][T15556] alloc_skb_with_frags+0x7d/0x470 [ 390.742169][T15556] ? __rcu_read_unlock+0x4f/0x70 [ 390.742191][T15556] ? should_fail_ex+0xdb/0x280 [ 390.742213][T15556] sock_alloc_send_pskb+0x430/0x4e0 [ 390.742277][T15556] ? __rcu_read_unlock+0x4f/0x70 [ 390.742365][T15556] packet_sendmsg+0x222b/0x31f0 [ 390.742418][T15556] ? avc_has_perm+0xf7/0x180 [ 390.742518][T15556] ? selinux_socket_sendmsg+0x175/0x1b0 [ 390.742548][T15556] ? __pfx_packet_sendmsg+0x10/0x10 [ 390.742609][T15556] __sock_sendmsg+0x145/0x180 [ 390.742628][T15556] ____sys_sendmsg+0x31e/0x4a0 [ 390.742689][T15556] ___sys_sendmsg+0x17b/0x1d0 [ 390.742733][T15556] __x64_sys_sendmsg+0xd4/0x160 [ 390.742774][T15556] x64_sys_call+0x17ba/0x3000 [ 390.742807][T15556] do_syscall_64+0xca/0x2b0 [ 390.742916][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.742945][T15556] RIP: 0033:0x7fb4f9e1f749 [ 390.742964][T15556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.742988][T15556] RSP: 002b:00007fb4f885e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.743097][T15556] RAX: ffffffffffffffda RBX: 00007fb4fa076090 RCX: 00007fb4f9e1f749 [ 390.743110][T15556] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000005 [ 390.743126][T15556] RBP: 00007fb4f885e090 R08: 0000000000000000 R09: 0000000000000000 [ 390.743142][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.743159][T15556] R13: 00007fb4fa076128 R14: 00007fb4fa076090 R15: 00007fff1133b048 [ 390.743184][T15556] [ 390.855971][T15552] syzkaller0: entered promiscuous mode [ 390.972892][T15552] syzkaller0: entered allmulticast mode [ 390.980651][T15558] loop8: detected capacity change from 0 to 256 [ 390.993017][T15558] vfat: Unknown parameter '0xffffffffffffffff0000000000000000000018446744073709551615' [ 391.022601][T15558] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4061'. [ 391.180553][T15573] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 391.201623][T15577] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.213211][T15571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.220837][T15573] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 391.250958][T15571] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.291260][T15579] program syz.0.4067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.321028][T15579] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 391.352027][T15577] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.362344][T15571] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4065: corrupted xattr block 32: bad e_name length [ 391.385403][T15571] EXT4-fs (loop7): Remounting filesystem read-only [ 391.391990][T15571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 391.406670][T15571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 391.428166][T15571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 391.439468][T15577] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.506149][T15577] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.557185][T15571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 391.575692][T15025] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.588510][T15025] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.594316][T15571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 391.606963][T15025] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.619501][T15025] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.710810][T15593] syz_tun: entered allmulticast mode [ 391.722872][T15595] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 391.738019][T14700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.749929][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4073'. [ 391.763064][T15595] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 391.776300][T15593] syz_tun (unregistering): left allmulticast mode [ 391.791979][T15595] EXT4-fs (loop0): 1 truncate cleaned up [ 391.801552][T15595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.953657][T15602] lo speed is unknown, defaulting to 1000 [ 391.998771][T15602] lo speed is unknown, defaulting to 1000 [ 392.194366][ T10] usb usb6-port1: unable to enumerate USB device [ 392.234997][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.270022][T11297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.279635][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.355546][T15610] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 392.377442][T15610] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.433328][T15610] FAULT_INJECTION: forcing a failure. [ 392.433328][T15610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.446602][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.0.4078 Not tainted syzkaller #0 PREEMPT(voluntary) [ 392.446643][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.446662][T15610] Call Trace: [ 392.446671][T15610] [ 392.446682][T15610] __dump_stack+0x1d/0x30 [ 392.446717][T15610] dump_stack_lvl+0x95/0xd0 [ 392.446904][T15610] dump_stack+0x15/0x1b [ 392.446933][T15610] should_fail_ex+0x265/0x280 [ 392.446966][T15610] should_fail+0xb/0x20 [ 392.447031][T15610] should_fail_usercopy+0x1a/0x20 [ 392.447145][T15610] _copy_from_iter+0xcf/0xe70 [ 392.447181][T15610] ? __alloc_skb+0x396/0x4b0 [ 392.447212][T15610] ? __alloc_skb+0x228/0x4b0 [ 392.447246][T15610] netlink_sendmsg+0x471/0x6b0 [ 392.447291][T15610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.447358][T15610] __sock_sendmsg+0x145/0x180 [ 392.447462][T15610] ____sys_sendmsg+0x31e/0x4a0 [ 392.447503][T15610] ___sys_sendmsg+0x17b/0x1d0 [ 392.447557][T15610] __x64_sys_sendmsg+0xd4/0x160 [ 392.447659][T15610] x64_sys_call+0x17ba/0x3000 [ 392.447694][T15610] do_syscall_64+0xca/0x2b0 [ 392.447739][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.447770][T15610] RIP: 0033:0x7fb4f9e1f749 [ 392.447790][T15610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.447843][T15610] RSP: 002b:00007fb4f887f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.447869][T15610] RAX: ffffffffffffffda RBX: 00007fb4fa075fa0 RCX: 00007fb4f9e1f749 [ 392.447966][T15610] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 392.447984][T15610] RBP: 00007fb4f887f090 R08: 0000000000000000 R09: 0000000000000000 [ 392.448001][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.448019][T15610] R13: 00007fb4fa076038 R14: 00007fb4fa075fa0 R15: 00007fff1133b048 [ 392.448045][T15610] [ 392.516953][T15619] netlink: 'syz.7.4081': attribute type 3 has an invalid length. [ 392.653088][T11297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.665993][T15621] set_capacity_and_notify: 4 callbacks suppressed [ 392.666016][T15621] loop4: detected capacity change from 0 to 2048 [ 392.678986][T15619] netlink: 'syz.7.4081': attribute type 3 has an invalid length. [ 392.706330][T15626] loop0: detected capacity change from 0 to 512 [ 392.716298][T15623] loop3: detected capacity change from 0 to 256 [ 392.722889][T15623] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 392.738683][T15623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4083'. [ 392.770673][T15628] SELinux: Context Ü is not valid (left unmapped). [ 392.781504][T15626] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 392.786608][T15621] Alternate GPT is invalid, using primary GPT. [ 392.796093][T15621] loop4: p2 p3 p7 [ 392.799900][T15626] System zones: 0-2, 18-18, 34-34 [ 392.813726][T15632] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4086'. [ 392.833532][T15626] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4082: bg 0: block 248: padding at end of block bitmap is not set [ 392.868934][T15632] ip6gre1: entered promiscuous mode [ 392.874359][T15632] ip6gre1: entered allmulticast mode [ 392.905677][T15626] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.4082: Failed to acquire dquot type 1 [ 392.917985][T15636] syz1: rxe_newlink: already configured on lo [ 392.950518][T15636] loop4: detected capacity change from 0 to 2048 [ 392.968433][T15626] EXT4-fs (loop0): 1 truncate cleaned up [ 392.974761][T15626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.988786][T15626] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.002618][T15640] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.013228][T15636] loop4: p3 p4 < > [ 393.018020][T15636] loop4: p3 size 861184 extends beyond EOD, truncated [ 393.039254][T11297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.056929][T15641] loop3: detected capacity change from 0 to 512 [ 393.076352][T15640] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.094418][T15641] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 393.142048][T15641] EXT4-fs (loop3): 1 truncate cleaned up [ 393.148623][T15641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.161284][T15648] ipt_ECN: cannot use operation on non-tcp rule [ 393.189388][T15652] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 393.215552][T15652] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.228416][T15640] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.250503][T15654] lo speed is unknown, defaulting to 1000 [ 393.267208][T15655] loop7: detected capacity change from 0 to 512 [ 393.273772][T15655] journal_path: Non-blockdev passed as './bus' [ 393.280006][T15655] EXT4-fs: error: could not find journal device path [ 393.289284][T15652] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.317442][T15656] loop4: detected capacity change from 0 to 512 [ 393.346627][T15656] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 393.365334][T15640] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.376660][T15656] EXT4-fs (loop4): 1 truncate cleaned up [ 393.382849][T15656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.407377][T15654] lo speed is unknown, defaulting to 1000 [ 393.440842][T15652] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.568723][T15652] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.663077][T15025] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.676085][T15025] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.689673][T15025] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.708087][T15025] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.844742][T15673] lo speed is unknown, defaulting to 1000 [ 393.892026][T15673] lo speed is unknown, defaulting to 1000 [ 394.187972][T15025] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.213637][T15025] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.225562][T15680] rdma_rxe: rxe_newlink: failed to add lo [ 394.236780][T15025] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.253992][T15025] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.254368][T15680] loop7: detected capacity change from 0 to 2048 [ 394.326474][T15680] loop7: p3 p4 < > [ 394.330451][T15680] loop7: p3 size 861184 extends beyond EOD, truncated [ 394.354148][T15688] netlink: 'syz.0.4104': attribute type 10 has an invalid length. [ 394.368055][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4104'. [ 394.446717][T15697] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 394.470971][T15697] loop7: detected capacity change from 0 to 512 [ 394.489160][T15697] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 394.501176][T15697] EXT4-fs (loop7): 1 truncate cleaned up [ 394.507852][T15697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.599183][T15706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4111'. [ 394.629687][T15706] ip6gre1: entered promiscuous mode [ 394.635010][T15706] ip6gre1: entered allmulticast mode [ 394.757155][ T3423] usb usb6-port1: attempt power cycle [ 395.065438][T15717] rdma_rxe: rxe_newlink: failed to add lo [ 395.081899][T15717] loop8: detected capacity change from 0 to 2048 [ 395.134403][T15717] loop8: p3 p4 < > [ 395.138379][T15717] loop8: p3 size 861184 extends beyond EOD, truncated [ 395.294266][T15721] netlink: 'syz.8.4117': attribute type 10 has an invalid length. [ 395.302599][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4117'. [ 395.442163][T15733] lo speed is unknown, defaulting to 1000 [ 395.486333][T15733] lo speed is unknown, defaulting to 1000 [ 395.623144][T15739] syz_tun: entered allmulticast mode [ 395.630965][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4124'. [ 395.643447][T15739] syz_tun (unregistering): left allmulticast mode [ 395.851276][T15747] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 395.886604][T15747] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.903369][T15751] netlink: 'syz.0.4128': attribute type 10 has an invalid length. [ 395.914952][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4128'. [ 395.943452][T15754] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 395.960298][T15754] EXT4-fs (loop8): 1 truncate cleaned up [ 395.977269][T15754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.066983][T15747] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.158624][T15747] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.291690][T15747] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.011839][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 397.011860][ T29] audit: type=1326 audit(1767557411.920:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.060142][ T29] audit: type=1326 audit(1767557411.950:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.083953][ T29] audit: type=1326 audit(1767557411.950:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.107685][ T29] audit: type=1326 audit(1767557411.950:10224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.116290][ T3423] usb usb6-port1: unable to enumerate USB device [ 397.131418][ T29] audit: type=1326 audit(1767557411.950:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.161393][ T29] audit: type=1326 audit(1767557411.950:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.185067][ T29] audit: type=1326 audit(1767557411.950:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.208725][ T29] audit: type=1326 audit(1767557411.950:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.232390][ T29] audit: type=1326 audit(1767557411.950:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.255995][ T29] audit: type=1326 audit(1767557411.950:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.0.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 397.290007][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.300057][ T1904] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.308413][ T1904] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.325702][ T1904] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.342842][ T1904] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.353799][T15774] ipt_ECN: cannot use operation on non-tcp rule [ 397.658250][T15795] lo speed is unknown, defaulting to 1000 [ 397.703347][T15795] lo speed is unknown, defaulting to 1000 [ 398.042655][T15806] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 398.057271][T15806] set_capacity_and_notify: 1 callbacks suppressed [ 398.057293][T15806] loop3: detected capacity change from 0 to 512 [ 398.078646][T15806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 398.091179][T15806] EXT4-fs (loop3): 1 truncate cleaned up [ 398.097415][T15806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.180062][T15799] netlink: 'syz.0.4146': attribute type 13 has an invalid length. [ 398.190156][T15799] gretap0: refused to change device tx_queue_len [ 398.197050][T15799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 398.215342][T15799] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 398.221787][T15799] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 398.788109][T15809] netlink: 'syz.0.4149': attribute type 3 has an invalid length. [ 398.796127][T15809] netlink: 'syz.0.4149': attribute type 3 has an invalid length. [ 399.074197][ T3423] usb usb6-port1: attempt power cycle [ 399.175687][ T1904] Bluetooth: hci0: Frame reassembly failed (-84) [ 400.914229][ T3423] usb usb6-port1: unable to enumerate USB device [ 400.928501][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.962797][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.968214][T14700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.981026][T14927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.226877][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 401.232954][ T4343] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 401.788384][T15866] netlink: 'syz.3.4175': attribute type 13 has an invalid length. [ 401.871239][T15873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 401.877722][T15873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 402.043738][T15866] gretap0: refused to change device tx_queue_len [ 402.074882][T15866] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 402.196086][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 402.196105][ T29] audit: type=1326 audit(1767557417.110:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.243033][ T29] audit: type=1326 audit(1767557417.110:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.266687][ T29] audit: type=1326 audit(1767557417.140:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.290790][ T29] audit: type=1326 audit(1767557417.140:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.297851][ T1881] ------------[ cut here ]------------ [ 402.314448][ T29] audit: type=1326 audit(1767557417.140:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.319952][ T1881] conntrack cleanup blocked for 60s [ 402.319970][ T1881] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x1e2/0x290, CPU#0: kworker/u8:9/1881 [ 402.320029][ T1881] Modules linked in: [ 402.320051][ T1881] CPU: 0 UID: 0 PID: 1881 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 402.320086][ T1881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.320102][ T1881] Workqueue: netns cleanup_net [ 402.320147][ T1881] RIP: 0010:nf_conntrack_cleanup_net_list+0x1e2/0x290 [ 402.320177][ T1881] Code: 4c 89 ef e8 d0 b1 f1 fc 4d 8b 65 00 4d 39 ec 74 2e e8 b2 28 d6 fc 45 31 ff e9 a7 fe ff ff e8 a5 28 d6 fc 48 8d 3d de f5 5c 02 <67> 48 0f b9 3a eb ca e8 92 28 d6 fc eb 0c e8 8b 28 d6 fc eb 05 e8 [ 402.365977][ T29] audit: type=1326 audit(1767557417.150:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.366038][ T29] audit: type=1326 audit(1767557417.160:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.366072][ T29] audit: type=1326 audit(1767557417.160:10321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.395140][ T29] audit: type=1326 audit(1767557417.300:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.397735][ T1881] RSP: 0018:ffffc90001db7c00 EFLAGS: 00010293 [ 402.465859][ T29] audit: type=1326 audit(1767557417.380:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.4.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568e6bf749 code=0x7ffc0000 [ 402.488257][ T1881] [ 402.488266][ T1881] RAX: ffffffff8481d76b RBX: 00000001000027bb RCX: ffff888104490000 [ 402.488285][ T1881] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: ffffffff86decd50 [ 402.488300][ T1881] RBP: 0000000000000001 R08: 000188810a0d002f R09: 0000000000000000 [ 402.488317][ T1881] R10: 0001c90001db7b70 R11: 0001c90001db7b77 R12: ffffc90001db7d08 [ 402.488332][ T1881] R13: ffffc90001db7d08 R14: 00000001000027b8 R15: 0000000000000001 [ 402.488347][ T1881] FS: 0000000000000000(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 402.592990][ T1881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.599666][ T1881] CR2: 00007f2dae2656c0 CR3: 000000011c89c000 CR4: 00000000003506f0 [ 402.607681][ T1881] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 402.615710][ T1881] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 402.623717][ T1881] Call Trace: [ 402.627058][ T1881] [ 402.630039][ T1881] nf_conntrack_pernet_exit+0xeb/0x100 [ 402.635564][ T1881] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 402.641713][ T1881] ops_undo_list+0x2c0/0x410 [ 402.646378][ T1881] cleanup_net+0x2f4/0x520 [ 402.650918][ T1881] process_scheduled_works+0x4ce/0x9d0 [ 402.656451][ T1881] worker_thread+0x582/0x770 [ 402.661090][ T1881] kthread+0x489/0x510 [ 402.665291][ T1881] ? __pfx_worker_thread+0x10/0x10 [ 402.670454][ T1881] ? __pfx_kthread+0x10/0x10 [ 402.675284][ T1881] ret_from_fork+0x149/0x290 [ 402.679971][ T1881] ? __pfx_kthread+0x10/0x10 [ 402.684648][ T1881] ret_from_fork_asm+0x1a/0x30 [ 402.689462][ T1881] [ 402.692502][ T1881] ---[ end trace 0000000000000000 ]--- [ 402.739447][T15909] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.794042][T15920] program syz.7.4193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.803804][T15920] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 402.898796][ T44] Bluetooth: hci0: sending frame failed (-49) [ 402.905168][ T4343] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 402.979599][T15909] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.993365][T15929] ipt_ECN: cannot use operation on non-tcp rule [ 403.837871][T15909] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.905988][T15909] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.976292][T15957] loop8: detected capacity change from 0 to 512 [ 404.012424][ T1904] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.037775][ T1904] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.053944][T15957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.053988][ T1904] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.083391][ T1904] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.092130][T15957] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.121622][T15957] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4215: corrupted xattr block 32: bad e_name length [ 404.136173][T15957] EXT4-fs (loop8): Remounting filesystem read-only [ 404.142847][T15957] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 404.151972][T15957] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 404.161216][T15957] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 404.172539][T15969] loop3: detected capacity change from 0 to 512 [ 404.189489][T15969] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 404.208317][T15969] EXT4-fs (loop3): invalid journal inode [ 404.218627][T14927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.286052][T15959] netlink: 'syz.4.4216': attribute type 13 has an invalid length. [ 404.305572][T15959] gretap0: refused to change device tx_queue_len [ 404.312432][T15959] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 404.331164][T15959] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.337603][T15959] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.503478][T15972] netlink: 'syz.7.4219': attribute type 13 has an invalid length. [ 404.514459][T15972] gretap0: refused to change device tx_queue_len [ 404.521498][T15972] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 404.554645][T15972] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.561093][T15972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.968385][T15995] loop3: detected capacity change from 0 to 256 [ 404.976945][T15995] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 404.992117][T15995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4228'. [ 405.114148][T16005] loop3: detected capacity change from 0 to 512 [ 405.140212][T16005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.157049][T16005] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.173544][T16010] loop7: detected capacity change from 0 to 512 [ 405.180412][T16010] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 405.208440][T16005] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4233: corrupted xattr block 32: bad e_name length [ 405.223368][T16005] EXT4-fs (loop3): Remounting filesystem read-only [ 405.230068][T16005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 405.248208][T16010] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 405.261584][T16005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 405.282086][T16005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 405.330612][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.501751][T16020] loop3: detected capacity change from 0 to 2048 [ 405.573876][T16023] loop8: detected capacity change from 0 to 512 [ 406.132079][T16031] loop4: detected capacity change from 0 to 256 [ 406.139462][T16031] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 406.348012][T16031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4241'. [ 406.489533][T16023] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 406.498600][T16023] EXT4-fs (loop8): invalid journal inode [ 406.660908][T16039] loop7: detected capacity change from 0 to 256 [ 406.667815][T16039] vfat: Unknown parameter '0xffffffffffffffff0000000000000000000018446744073709551615' [ 406.690846][T16039] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4244'. [ 406.700433][T16044] loop8: detected capacity change from 0 to 512 [ 406.707537][T16044] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 406.730436][T16044] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 406.826409][T16054] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4250'. [ 406.955645][T16042] netlink: 'syz.3.4245': attribute type 13 has an invalid length. [ 406.971607][T16058] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 406.984949][T16042] gretap0: refused to change device tx_queue_len [ 406.992723][T16042] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 407.016305][T16058] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4252'. [ 407.028388][T16042] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 407.034808][T16042] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 407.117210][T16061] Alternate GPT is invalid, using primary GPT. [ 407.123730][T16061] loop8: p2 p3 p7 [ 407.267009][T16065] Alternate GPT is invalid, using primary GPT. [ 407.273574][T16065] loop8: p2 p3 p7 [ 407.347409][T16069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.360554][T16069] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.391109][T16069] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4257: corrupted xattr block 32: bad e_name length [ 407.405691][T16069] EXT4-fs (loop8): Remounting filesystem read-only [ 407.412263][T16069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 407.421683][T16069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 407.430855][T16069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 407.488584][T14927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.492157][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 407.492204][ T29] audit: type=1326 audit(1767557422.400:10414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.549455][ T29] audit: type=1326 audit(1767557422.440:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.573187][ T29] audit: type=1326 audit(1767557422.440:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.596948][ T29] audit: type=1326 audit(1767557422.440:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.620723][ T29] audit: type=1326 audit(1767557422.440:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.644437][ T29] audit: type=1326 audit(1767557422.440:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.668079][ T29] audit: type=1326 audit(1767557422.440:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.691868][ T29] audit: type=1326 audit(1767557422.440:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.715633][ T29] audit: type=1326 audit(1767557422.440:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.739343][ T29] audit: type=1326 audit(1767557422.440:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16073 comm="syz.0.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f9e1f749 code=0x7ffc0000 [ 407.782990][T16080] lo speed is unknown, defaulting to 1000 [ 407.838760][T16080] lo speed is unknown, defaulting to 1000 [ 407.853197][T16083] journal_path: Non-blockdev passed as './bus' [ 407.859688][T16083] EXT4-fs: error: could not find journal device path [ 407.887939][T16085] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 407.915657][T16085] System zones: 0-2, 18-18, 34-34 [ 407.930942][T16085] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4262: bg 0: block 248: padding at end of block bitmap is not set [ 407.947565][T16085] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4262: Failed to acquire dquot type 1 [ 407.996831][T16085] EXT4-fs (loop8): 1 truncate cleaned up [ 408.010770][T16085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.031113][T16085] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.073981][T14927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.236429][T16098] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 408.278216][T16098] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 408.310385][T16098] EXT4-fs (loop8): 1 truncate cleaned up [ 408.316920][T16098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.715688][T14286] Bluetooth: hci0: command 0x1003 tx timeout [ 408.721933][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 408.845395][T16104] lo speed is unknown, defaulting to 1000 [ 408.984195][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 409.006188][ T4343] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 409.079483][T16104] lo speed is unknown, defaulting to 1000 [ 409.186422][T16107] netlink: 'syz.3.4267': attribute type 10 has an invalid length. [ 409.208626][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4267'. [ 409.515998][T16123] set_capacity_and_notify: 7 callbacks suppressed [ 409.516022][T16123] loop3: detected capacity change from 0 to 512 [ 409.547569][T16123] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 409.559012][T16123] System zones: 0-2, 18-18, 34-34 [ 409.565394][T16123] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4273: bg 0: block 248: padding at end of block bitmap is not set [ 409.580176][T16123] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4273: Failed to acquire dquot type 1 [ 409.595052][T16125] Restarting kernel threads ... [ 409.600138][T16125] Done restarting kernel threads. [ 409.643053][T16123] EXT4-fs (loop3): 1 truncate cleaned up [ 409.670231][T16123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.701487][T16123] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.765555][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.879472][T16148] ipt_ECN: cannot use operation on non-tcp rule [ 409.896385][T16150] loop0: detected capacity change from 0 to 512 [ 409.903323][T16150] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 409.939774][T16150] syz!: rxe_newlink: already configured on team_slave_0 [ 409.987644][T16155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 410.041938][ T44] Bluetooth: hci1: sending frame failed (-49) [ 410.048102][ T4343] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 410.085570][T16161] lo speed is unknown, defaulting to 1000 [ 410.127554][T16161] lo speed is unknown, defaulting to 1000 [ 410.397190][T16165] loop0: detected capacity change from 0 to 2048 [ 410.436543][T16165] Alternate GPT is invalid, using primary GPT. [ 410.442915][T16165] loop0: p2 p3 p7 [ 410.545413][T16168] loop0: detected capacity change from 0 to 512 [ 410.553704][T16168] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 410.566837][T16168] EXT4-fs (loop0): invalid journal inode [ 410.698279][ T23] usb usb6-port1: attempt power cycle [ 410.702855][T16174] loop7: detected capacity change from 0 to 256 [ 410.716243][T16174] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 410.750840][T16174] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4294'. [ 410.805302][T16181] ipt_ECN: cannot use operation on non-tcp rule [ 410.824116][T16183] loop7: detected capacity change from 0 to 512 [ 410.830985][T16183] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 410.858390][T16183] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 411.034613][T16192] loop7: detected capacity change from 0 to 512 [ 411.046383][T16192] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.059495][T16192] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.088659][T16192] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4302: corrupted xattr block 32: bad e_name length [ 411.102688][T16192] EXT4-fs (loop7): Remounting filesystem read-only [ 411.109350][T16192] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 411.118566][T16192] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 411.127821][T16192] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 411.197030][T14700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.438212][T16207] loop0: detected capacity change from 0 to 256 [ 411.445533][T16207] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 411.460475][T16207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4308'. [ 411.516295][T16212] ipt_ECN: cannot use operation on non-tcp rule [ 411.590588][T16214] loop0: detected capacity change from 0 to 512 [ 411.597490][T16214] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 411.614333][T16214] syz!: rxe_newlink: already configured on team_slave_0 [ 411.652823][T16216] loop0: detected capacity change from 0 to 2048 [ 411.710143][T16216] Alternate GPT is invalid, using primary GPT. [ 411.716718][T16216] loop0: p2 p3 p7 [ 411.787024][T16218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.823941][T16218] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.885920][T16227] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 411.899582][T16227] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 411.924456][T16218] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.4313: corrupted xattr block 32: bad e_name length [ 411.968228][T16218] EXT4-fs (loop0): Remounting filesystem read-only [ 411.974888][T16218] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 411.994968][T16218] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 412.005569][T16232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.018310][T16232] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.029022][T16218] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 412.047993][T16236] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 412.069514][T11297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.095691][T16236] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4319'. [ 412.143624][T16232] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4318: corrupted xattr block 32: bad e_name length [ 412.169417][T16232] EXT4-fs (loop3): Remounting filesystem read-only [ 412.176049][T16232] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 412.187326][T16232] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 412.201254][T16243] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.212400][T16232] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 412.259163][T16243] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.272673][T16245] program syz.7.4321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.293205][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.304888][T16245] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 412.365994][T16243] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.404777][T16240] netlink: 'syz.0.4320': attribute type 13 has an invalid length. [ 412.415805][T16243] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.429896][T16240] gretap0: refused to change device tx_queue_len [ 412.441620][T16240] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 412.468101][T16249] lo speed is unknown, defaulting to 1000 [ 412.479552][T16251] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 412.498429][T15013] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.507379][T15013] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.516357][T15013] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.534183][T16240] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 412.540604][T16240] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 412.549656][ T23] usb usb6-port1: unable to enumerate USB device [ 412.576447][T15013] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.593631][T16249] lo speed is unknown, defaulting to 1000 [ 412.616877][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 412.616895][ T29] audit: type=1326 audit(1767557427.530:10450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.660523][T14927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.670442][ T29] audit: type=1326 audit(1767557427.560:10451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.694110][ T29] audit: type=1326 audit(1767557427.560:10452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.717805][ T29] audit: type=1326 audit(1767557427.560:10453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.728636][T16257] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 412.741622][ T29] audit: type=1326 audit(1767557427.560:10454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.775550][ T29] audit: type=1326 audit(1767557427.560:10455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.799215][ T29] audit: type=1326 audit(1767557427.560:10456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.822810][ T29] audit: type=1326 audit(1767557427.560:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.846412][ T29] audit: type=1326 audit(1767557427.560:10458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.850497][T16260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 412.870078][ T29] audit: type=1326 audit(1767557427.560:10459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.7.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9a0fb3f749 code=0x7ffc0000 [ 412.994909][T16260] EXT4-fs (loop4): 1 truncate cleaned up [ 413.006404][T16260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.570468][T16275] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 413.635953][T16278] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 413.648765][T16278] syz!: rxe_newlink: already configured on team_slave_0 [ 413.686360][T16275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4332'. [ 413.709426][T16280] vfat: Unknown parameter '0x00000000000000040000000000000000000018446744073709551615' [ 413.724007][T16280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4334'. [ 413.784476][ T10] ================================================================== [ 413.789364][T16283] Alternate GPT is invalid, using primary GPT. [ 413.792593][ T10] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 413.799129][T16283] loop0: p2 p3 p7 [ 413.806658][ T10] [ 413.806667][ T10] read-write to 0xffff8881005fd6b8 of 8 bytes by task 16283 on cpu 1: [ 413.806689][ T10] __filemap_add_folio+0x5b9/0x7d0 [ 413.826020][ T10] filemap_add_folio+0x1d9/0x360 [ 413.830976][ T10] do_read_cache_folio+0xd9/0x5b0 [ 413.836028][ T10] read_cache_folio+0x3c/0x50 [ 413.840732][ T10] read_part_sector+0x6f/0x150 [ 413.845528][ T10] read_lba+0x100/0x1e0 [ 413.849714][ T10] efi_partition+0x1ea/0x1400 [ 413.854422][ T10] bdev_disk_changed+0x4b9/0xcb0 [ 413.859389][ T10] loop_set_status+0x5d2/0x6a0 [ 413.864168][ T10] lo_ioctl+0x671/0x12b0 [ 413.868423][ T10] blkdev_ioctl+0x37d/0x460 [ 413.872946][ T10] __se_sys_ioctl+0xce/0x140 [ 413.877551][ T10] __x64_sys_ioctl+0x43/0x50 [ 413.882175][ T10] x64_sys_call+0x14b0/0x3000 [ 413.886865][ T10] do_syscall_64+0xca/0x2b0 [ 413.891401][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.897311][ T10] [ 413.899654][ T10] read to 0xffff8881005fd6b8 of 8 bytes by task 10 on cpu 0: [ 413.907035][ T10] nr_blockdev_pages+0x7e/0xd0 [ 413.911814][ T10] si_meminfo+0x87/0xd0 [ 413.915980][ T10] update_defense_level+0x47/0x5c0 [ 413.921133][ T10] defense_work_handler+0x1f/0x80 [ 413.926174][ T10] process_scheduled_works+0x4ce/0x9d0 [ 413.931655][ T10] worker_thread+0x582/0x770 [ 413.936250][ T10] kthread+0x489/0x510 [ 413.940375][ T10] ret_from_fork+0x149/0x290 [ 413.945004][ T10] ret_from_fork_asm+0x1a/0x30 [ 413.949796][ T10] [ 413.952123][ T10] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 413.959226][ T10] [ 413.961573][ T10] Reported by Kernel Concurrency Sanitizer on: [ 413.967720][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 413.978928][ T10] Tainted: [W]=WARN [ 413.982768][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.992829][ T10] Workqueue: events_long defense_work_handler [ 413.998910][ T10] ================================================================== [ 414.915917][T15499] usb usb6-port1: attempt power cycle [ 416.784185][T15499] usb usb6-port1: unable to enumerate USB device [ 416.807616][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.