last executing test programs: 7m37.613852413s ago: executing program 2 (id=6659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25010000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) 7m37.596093716s ago: executing program 2 (id=6660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc87"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setreuid(0xee01, 0x0) uname(0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0}, 0x38) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) 7m36.604529154s ago: executing program 2 (id=6679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_uring_setup(0xf46, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf25010000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) 7m36.544076062s ago: executing program 2 (id=6680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) 7m36.459628773s ago: executing program 2 (id=6681): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) capset(0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757817"], 0x65) 7m36.445930125s ago: executing program 2 (id=6683): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 7m21.347044888s ago: executing program 32 (id=6683): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 6m3.379474156s ago: executing program 4 (id=8474): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m3.234973424s ago: executing program 4 (id=8476): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48081) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a00000000008510000002000004850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x81, &(0x7f00000002c0)={@empty, @broadcast, @void, {@generic={0x6000, "2c922b363274057c9305242e337b0e8a9073bbdc807ad274fae4eeba14daff75f3e888be65437e125c757a351dca0f51b0e188281c621e26f05965a216a8d9ad8854914cc24f0849f8340a18944c7a5f274b9743195370478662003bd4451c56b751bc13f06c23c2bbbb8a9bced6675c77b10d"}}}, &(0x7f0000000040)={0x0, 0x1, [0x322, 0xdd9, 0x478, 0x8a8]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x7, 0x0, 0x80000}, 0x100}) 6m1.925356334s ago: executing program 4 (id=8484): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf2501", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) 6m1.858289763s ago: executing program 4 (id=8487): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007000000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x7a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10454ca, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x56) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 6m1.751574016s ago: executing program 4 (id=8489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) 6m1.623877483s ago: executing program 4 (id=8492): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 6m1.438096437s ago: executing program 33 (id=8492): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 5m26.604747954s ago: executing program 0 (id=8980): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) syz_usbip_server_init(0x1) 5m26.01472913s ago: executing program 0 (id=8996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000f9ffff17110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020002000000ffb703000008"], 0x0, 0x5, 0xfffffefe}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYRES8=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000740)=""/129) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$packet(0x11, 0x3, 0x300) close(r9) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r10, &(0x7f0000000080)=""/196, 0xc4, 0x3) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) 5m25.667648675s ago: executing program 0 (id=9001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_complete(0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @multicast1}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, r3}) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000060000000000002000850000000f000010c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) listxattr(0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) r8 = socket(0x1, 0x2, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r8}, 0x20) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000b40)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000005c0)="41181a01b083115962e170916a47e8d96a14071a1cbbcfd12c2c0507db884e6bf898c1d59f5c3bf96f82224bf8376d49d2881f451b2edf553312fcae0614d05cda031308920e695c23efa4f4a4634a2f4ff1aa1700ff084ff97f78dd69180e285f4504", 0x63}], 0x1, 0x0, 0x0, 0x40800}}, {{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000dc0)="e128d9439b2597d996af9ee6f5a16d9ae93edd2fd45099fdefd6ce9200c8b8cc2c3819a10bd7bd3976d2435556e38f472b1d98d440d84602c4658ed2ee12343e6881c9d02376312173f34369be1f9ba9ce87acb883962db01ebd833fbf32fb1f2b656a98bce4c180a701db0d3d53aab27e2d03e03f076318795f6e978cf35ab2cd19bd6241f2472f02712edd5b95ac8c5d3585a694557295e190b40dab23bcff60688b2c98ac50b58a57b5a87172680a98c21eb6538f73adb4544483a298fe2a696c6acc3d51aa0033c075543b3eed55062bba8a9cd103f1e5a050d86e8eb4", 0xdf}, {&(0x7f0000000ec0)="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", 0xfd}], 0x2, 0x0, 0x0, 0x4000000}}], 0x3, 0x0) recvmmsg(r8, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1, 0x0, 0xfe3e}}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r8, 0x57be}], 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5m25.327758549s ago: executing program 0 (id=9005): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)='.\x00') 5m25.184143238s ago: executing program 0 (id=9008): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 5m24.687630012s ago: executing program 0 (id=9016): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48081) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a00000000008510000002000004850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x81, &(0x7f00000002c0)={@empty, @broadcast, @void, {@generic={0x6000, "2c922b363274057c9305242e337b0e8a9073bbdc807ad274fae4eeba14daff75f3e888be65437e125c757a351dca0f51b0e188281c621e26f05965a216a8d9ad8854914cc24f0849f8340a18944c7a5f274b9743195370478662003bd4451c56b751bc13f06c23c2bbbb8a9bced6675c77b10d"}}}, &(0x7f0000000040)={0x0, 0x1, [0x322, 0xdd9, 0x478, 0x8a8]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x7, 0x0, 0x80000}, 0x100}) 5m24.687261742s ago: executing program 34 (id=9016): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48081) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a00000000008510000002000004850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x81, &(0x7f00000002c0)={@empty, @broadcast, @void, {@generic={0x6000, "2c922b363274057c9305242e337b0e8a9073bbdc807ad274fae4eeba14daff75f3e888be65437e125c757a351dca0f51b0e188281c621e26f05965a216a8d9ad8854914cc24f0849f8340a18944c7a5f274b9743195370478662003bd4451c56b751bc13f06c23c2bbbb8a9bced6675c77b10d"}}}, &(0x7f0000000040)={0x0, 0x1, [0x322, 0xdd9, 0x478, 0x8a8]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x7, 0x0, 0x80000}, 0x100}) 3m3.692424264s ago: executing program 6 (id=11637): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22840, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000000000008}, 0x18) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002dbd7000fbdbdf25140000000c0006000200000002050000001b251f1c00", @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x440d1}, 0x4000000) r9 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) pread64(r1, &(0x7f0000001440)=""/123, 0x7b, 0x841) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 3m2.835498175s ago: executing program 6 (id=11656): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/210, 0xd2}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/6, 0x6}, 0x1}], 0x2, 0x45833af96e4b39ff, 0x0) 3m2.572422508s ago: executing program 6 (id=11661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwritev2(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x0, 0x0) 3m2.373197435s ago: executing program 6 (id=11664): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x7) brk(0x1) capset(&(0x7f0000000080)={0x20071026}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x802, 0x4, 0x7}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r1, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 3m2.210143666s ago: executing program 6 (id=11666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f0000000000000020001280696467650000100400800c002e0003000000030000009adac9e1f7a51f430696435d6e3d8ef473993fe080ec0adff24b2939e78681ed44e2853422317ccc530bc78ba98be611131bac2621ddd7458b7b409df742d01b38d3158c00"/115], 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f0000000100)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7eef8ad7aea5349e4086457ad9f3f7547dde64890", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3cfd94f2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004880)=ANY=[@ANYBLOB="240000003900070101000000fbe8df25037c000004008c800c000180060006008847"], 0x24}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="006cf504", @ANYRES16=r2, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000001) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000e0ff000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r11, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) getpid() 2m59.925697791s ago: executing program 6 (id=11692): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mknod$loop(0x0, 0x6001, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x4}, 0x18) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) socket$netlink(0x10, 0x3, 0x0) 2m59.925486741s ago: executing program 35 (id=11692): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mknod$loop(0x0, 0x6001, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x4}, 0x18) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) socket$netlink(0x10, 0x3, 0x0) 18.001970401s ago: executing program 5 (id=13973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0x1, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}], [], 0x6b}}) 16.118707005s ago: executing program 5 (id=14001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 16.090333378s ago: executing program 5 (id=14002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1830, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r1, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000002040"], 0x24, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) clock_gettime(0x8, &(0x7f0000000280)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setfsuid(0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x14) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000}, 0x1c) sendto$inet6(r2, &(0x7f0000000440)='/', 0x1, 0x24000000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xcc}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000350000000000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0703050000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x1, 0x0, 0x0, 0x7ffc0002}]}) personality(0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) copy_file_range(r9, 0x0, r9, 0x0, 0x401, 0x0) write$binfmt_register(r9, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa, 0x3a, '', 0x3a, 'kmem_cache_free\x00', 0x3a, './file1', 0x3a, [0x4f, 0x46, 0x46]}, 0x3a) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000300000100001800128008000100677470000c000280050005000000000008000300", @ANYRES32=0x0, @ANYBLOB="bee11de77041c340b82039d62c3ed2414fa05f500c91ec46d53dc36273391dd6e195162fdf65e3976655"], 0x40}}, 0x24000840) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0) 15.837831801s ago: executing program 5 (id=14006): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x800, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x1, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x6, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0x6, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0xff, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0x1ffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000026c0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/122, 0x7a}, {&(0x7f0000000c00)=""/91, 0x5b}], 0x5, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e80)=""/95, 0x5f}, {&(0x7f0000001f00)=""/83, 0x53}], 0x2, &(0x7f0000001f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000002540)=[{&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000002080)=""/219, 0xdb}, {&(0x7f0000002180)=""/158, 0x9e}, {&(0x7f0000002240)=""/252, 0xfc}, {&(0x7f0000002340)=""/218, 0xda}, {&(0x7f0000002440)=""/242, 0xf2}], 0x6, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x3, 0x12062, &(0x7f00000027c0)={r3, r4+10000000}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) setpgid(r0, r0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) gettid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000400), &(0x7f00000003c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") 15.546914499s ago: executing program 5 (id=14013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1a, 0x3, 0x2000002) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000380)) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000b4010000f8ffffffb702000008000000b70300000000000085000000b000000091"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x138, 0x178, 0xc, 0x138, 0x178, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7fff, 0x836, 0x0, 0x0, 0x2, 0xfffffffc}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @local, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff000000], 'vlan1\x00', 'hsr0\x00', {}, {0xff}, 0x32}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 14.60957294s ago: executing program 5 (id=14020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000008500d3df91bf00009500"/25], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 14.563818176s ago: executing program 36 (id=14020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000008500d3df91bf00009500"/25], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 4.858892812s ago: executing program 9 (id=14140): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f0000000280)={@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x97}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 3.939708951s ago: executing program 9 (id=14148): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private, @loopback}, &(0x7f0000000300)=0xc) r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x28e}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x0) 3.764951833s ago: executing program 9 (id=14149): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x62}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x18, &(0x7f0000000880)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_sync_file_enter\x00', r3, 0x0, 0x9}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.393980901s ago: executing program 8 (id=14156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000851157bbd57a9c36920000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x8800, 0x7528, 0x5cc, 0x7ffe, 0x9}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4}, 0x18) readlink(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x99d}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 3.122328266s ago: executing program 8 (id=14158): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37790000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xd, 0x0, &(0x7f0000000600)="c9f7b986000000000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@grpquota}, {@inode_readahead_blks}, {@errors_remount}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x800800, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c757466383d302c757466383d312c646f733178666c6f7070792c6572726f72733d636f6e74696e89652c73686f72746e616d653d77696e6e742c00"], 0x3, 0x21f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.905418974s ago: executing program 1 (id=14163): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x800, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x1, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x6, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0x6, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0xff, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0x1ffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000026c0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/122, 0x7a}, {&(0x7f0000000c00)=""/91, 0x5b}], 0x5, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e80)=""/95, 0x5f}, {&(0x7f0000001f00)=""/83, 0x53}], 0x2, &(0x7f0000001f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000002540)=[{&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000002080)=""/219, 0xdb}, {&(0x7f0000002180)=""/158, 0x9e}, {&(0x7f0000002240)=""/252, 0xfc}, {&(0x7f0000002340)=""/218, 0xda}, {&(0x7f0000002440)=""/242, 0xf2}], 0x6, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x3, 0x12062, &(0x7f00000027c0)={r3, r4+10000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) setpgid(r0, r0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) gettid() recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000400), &(0x7f00000003c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") 2.873358329s ago: executing program 9 (id=14164): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$eJzs3MtvG8UfAPDvrvPoO/n1Vx59QAMFEVFImrRAD0gIBFIvSEhwgGNIQ1XqtqgJEq0q2iJUjoi/ADgi8RdwggsCTiCucEdIFeqlhQMyWns3cWLXuHYdh/rzkdaZ2dfM7OxkZ3e8DmBgTWQfScS2iPglIsZq0dUrTNT+3Lx+cf7P6xfnk6hUXv1jtLrejesX54tVi+225pHJNCL9MIm9TdJdPH/h1Fy5vHAuj08vnX5nevH8hSdPnp47sXBi4czs0aNHDs888/TsU3eknFm5bux5/+y+3cfe+OTl+Uq8+f2XWX635cvry1Ez3nWaEzERlUqlkq6aO1L9fLTrvW8s2yPiSh5OhvqcGdpWioisuoar7X8sSrFSeWPx0gd9zRzQU9n1abRhbin/O5RkyzfVrQvcTRLtGgZUccXP7n+Lab36HhvBteezz4Vq+W/mU23JUGT37cl47Y691KP0t0XE65f/+jSboulzCACAO+vrrP/zRLP+Xxr31q23Ix9DGY+IgxGxMyL+HxG7IuKeiOq690XE/beZfnX86cpKvLH/89PmjgvXhqz/92w+trW6/7c8ajNeymPbq+UfTt46WV44lB+TyRgezeIzLdL45sWfP77Vsom6/l82ZekXfcE8H78PrXlAd3xuaa6bMte7diViz1Cz8ifLIwFJROyOiD0d7D87Zicf/2JfFt6xtXH5v5e/lcsd5Gi1yucRj9Xq/3KsKX8hqQ2R3Gp8cnpTlBcOTRdnRaMffrz6Sn18uC7cXfm7l9X/lqbnf17+ohkU47WLbe54ZCV49deP8n02NuVOz/+R5LVVybw3t7R0biZiZCQa58+ubFvEi/Wz8k8eiLiaDwTXt/+dEX9/lm+3NyKyk/iBiHgwIvbneX8oIh6OiAMtDsV3LzzyduuD1d/6P96q/iPGk/rx+g4CpVPfflXsbLkq838u7dX/kWpoMp/Tzv+/djN4J44hAAAAbHRpdQw6SaeWw2k6NVX7Dv+u2JKWzy4uHZyId88cr41Vj8dwWjzpGqt7HjqTPxsu4rNr4ocj4n/Vbxptrsan5s+Wt/e78DDgtt6i/Wd+69WXXoCN47be10p6lw9g/XlfEwZX2+1/uLf5ANaf6z8MLu0fBlez9n8p4mYfsgKss9u6/j/Xu3wA669V+/fID+5u7v9hcGn/MJAaX4kvfqOhkzf9VwI7j3W1+QAFSj3ac9T/aEcPApH2/dB1Hkg3Qjb254HRiGh3q0s9rdO15w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3z8BAAD//yxO2No=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fspick(0xffffffffffffff9c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) close(0xffffffffffffffff) 2.417987717s ago: executing program 3 (id=14165): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x800, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x1, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x6, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0x6, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0xff, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0x1ffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) recvmmsg$unix(r1, &(0x7f00000026c0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/122, 0x7a}, {&(0x7f0000000c00)=""/91, 0x5b}], 0x5, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e80)=""/95, 0x5f}, {&(0x7f0000001f00)=""/83, 0x53}], 0x2, &(0x7f0000001f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000002540)=[{&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000002080)=""/219, 0xdb}, {&(0x7f0000002180)=""/158, 0x9e}, {&(0x7f0000002240)=""/252, 0xfc}, {&(0x7f0000002340)=""/218, 0xda}, {&(0x7f0000002440)=""/242, 0xf2}], 0x6, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x3, 0x12062, &(0x7f00000027c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) setpgid(r0, r0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) gettid() recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00"], 0x48) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000400), &(0x7f00000003c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) 2.231537582s ago: executing program 9 (id=14166): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x800, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x1, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x6, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0x6, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0xff, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0x1ffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000026c0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/122, 0x7a}, {&(0x7f0000000c00)=""/91, 0x5b}], 0x5, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e80)=""/95, 0x5f}, {&(0x7f0000001f00)=""/83, 0x53}], 0x2, &(0x7f0000001f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000002540)=[{&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000002080)=""/219, 0xdb}, {&(0x7f0000002180)=""/158, 0x9e}, {&(0x7f0000002240)=""/252, 0xfc}, {&(0x7f0000002340)=""/218, 0xda}, {&(0x7f0000002440)=""/242, 0xf2}], 0x6, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x3, 0x12062, &(0x7f00000027c0)={r3, r4+10000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) setpgid(r0, r0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) gettid() recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000400), &(0x7f00000003c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") 2.113137767s ago: executing program 7 (id=14167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000019180)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1344, 0xffff0000}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000003c0), &(0x7f00000004c0)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="02f7e5235c23cbb1765472e483c1aec7b72bd963cfb60435c4f2ff2b9a8e5c2ee1fcd9419ad9647e2fa1daf1257a9ed5473df06d30113e6d03d160a0c4aeac040e1fd0ea9efe530278fc95b5a9e2ec22cd1f8a274a7bb3972bee2926615c6dd26fbbe56d2eebc4a632d95007123fed7c5d0ff05629020d62d1f64f1e83c8fb472791b48cff7c3402f9c120243846928cb34c6ee415c2ac8231dbaf55257cf3a69fba37f55c6a399ed7e24e646c9802873169d6e52f8d21063a9444a43652d566eba2388f07a0922262eca19c8bbcf3", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000a00)={0x0, 0x7, 0x1, [0x5, 0x5, 0x9, 0xf, 0x159], [0x7f, 0x78, 0x80, 0xffffffffffffff00, 0x3, 0x4, 0x7, 0x8000000000000001, 0x5, 0x10, 0x7fff, 0x6, 0x5, 0x4, 0x0, 0x8, 0x9, 0xfffffffffffffff7, 0x4, 0xfffffffffffffff8, 0x84, 0x1, 0x2, 0x4, 0x200, 0x8001, 0x1, 0x9, 0x180000000000, 0x7, 0x0, 0x2, 0x4, 0x3, 0x7, 0xdf, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x8000, 0x3, 0x200, 0xe, 0x7, 0xffffffffffffffff, 0x8, 0x80, 0x2d6f, 0x4b, 0x8, 0x9bc, 0x5, 0xfffffffffffffffc, 0xa5a2, 0x10, 0x20000000000000, 0x7f, 0x20b, 0x8000, 0x9f27, 0x5, 0xf, 0xc3, 0x1, 0x5000000000, 0x2, 0x9, 0x6, 0x2, 0x8000000000000001, 0x8, 0xfffffffff2b77f72, 0x1, 0x4922, 0x7, 0x6, 0x8, 0x10001, 0x0, 0x6000000, 0x5, 0xe, 0xbaf7, 0x1, 0x0, 0x2, 0x0, 0x5, 0x2e6, 0x2, 0x89, 0x93, 0x1, 0x3, 0x10, 0xce3, 0xafc, 0x8, 0x3, 0x6, 0x6, 0x6, 0x7, 0x6, 0x81, 0x45b6, 0x3, 0x8a8, 0x5, 0x8000000000000001, 0x4, 0x8, 0x2, 0x7fff, 0x1]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x1000000000000008}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000080), 0x20000000}, 0x20) ioctl$TIOCL_BLANKSCREEN(r7, 0x4b67, &(0x7f0000000400)) 1.572116956s ago: executing program 8 (id=14168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000851157bbd57a9c36920000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x8800, 0x7528, 0x5cc, 0x7ffe, 0x9}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4}, 0x18) readlink(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x99d}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 1.531219672s ago: executing program 7 (id=14169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25010000000c0001", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) 1.369143963s ago: executing program 3 (id=14170): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.31241741s ago: executing program 7 (id=14171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000050000000004", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6b, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000a00)={@link_local, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x2, 0x6, "8575db", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e22, 0x7, 0x4, 0x1, 0xe, 0x0, 0x0, 0x2, 0x0, "83b34a", 0x5, "f44ee0"}}}}}}}}, 0x0) 1.294778913s ago: executing program 3 (id=14172): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ff}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 1.228120162s ago: executing program 7 (id=14173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cff00000000000000000000000000200000ff020000000000000000000000000001"], 0x0) 1.176564368s ago: executing program 7 (id=14174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000006, 0x42032, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 963.564205ms ago: executing program 3 (id=14175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x1, &(0x7f00000002c0)={{}, {0x0, 0xea60}}, 0x0) getitimer(0x1, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x59e, &(0x7f0000000cc0)="$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") r3 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r3, 0x0, 0x9, 0x2000403) r4 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x64) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000140)={0x17c04, r4, 0xc000, 0x973f, 0x81, 0x1}) 881.117217ms ago: executing program 8 (id=14176): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 742.775194ms ago: executing program 8 (id=14177): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040a0d080006007c02e8fe55a10a0015001200142603600e1208000f4f1b000401a8001600200094007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f", 0x5e}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 405.486818ms ago: executing program 3 (id=14178): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xffff2c94, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRESOCT=r6, @ANYRES32=r3, @ANYBLOB="ac24c9ee3826c628f93cf45f789339dfbbefec07dd71034cd2c7e77e6a89d3f8bafade9cb27074f965fa7340319bec32cc0590dd8e92584dc6b247667769f4b7e2c1efb848a0972ca4364a93572d136d1450c3a0f4660fdcb29586c0a7350454f4af238804b7f2ba299726685f02aabfcc1b46e37472c1694ce90076c9e4b27ef38b597e85670fcec7315b367c843924edca2545526c34c485c6efd3711f031b3fb3f6a91d447c5c2571cb87c52cfc02b836b0a44d9cdf8ef1136f0a2ddd62c5c1c6ec68d857461d94"]) linkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r4, &(0x7f0000000140)='./file2\x00', 0x1400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='traCo=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',uname=errors=remount-ro,access=client,cache=fscache,ignoreqv,cachetag=trusted.overlay.upper\x00,\x00']) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setgid(0xee00) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x2000c846, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x10, &(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="87a67429e56d2c5a916c51709d6cbc7de03c423dea116c471f3483c94cbee657c75194c768c515015a1fd5b0439640f6a1c1a6c42ede9f", @ANYRES8=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r8, @ANYRESOCT=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r10}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0xab7e, 0x0) mount(&(0x7f0000000740)=@md0, &(0x7f00000007c0)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095", @ANYRESDEC=0x0, @ANYRESDEC=r8, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) 289.641993ms ago: executing program 7 (id=14179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x1, &(0x7f00000002c0)={{}, {0x0, 0xea60}}, 0x0) getitimer(0x1, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x59e, &(0x7f0000000cc0)="$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") r3 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r3, 0x0, 0x9, 0x2000403) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) pwritev2(r4, 0x0, 0x0, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000140)={0x17c04, r4, 0xc000, 0x973f, 0x81, 0x1}) 271.999235ms ago: executing program 1 (id=14180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) brk(0x4) 166.123769ms ago: executing program 1 (id=14181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25010000000c0001", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) 112.899356ms ago: executing program 1 (id=14182): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 46.381574ms ago: executing program 1 (id=14183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000050000000004", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6b, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000a00)={@link_local, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x2, 0x6, "8575db", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e22, 0x7, 0x4, 0x1, 0xe, 0x0, 0x0, 0x2, 0x0, "83b34a", 0x5, "f44ee0"}}}}}}}}, 0x0) 18.040168ms ago: executing program 1 (id=14184): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cff00000000000000000000000000200000ff020000000000000000000000000001"], 0x0) 12.101929ms ago: executing program 9 (id=14185): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x2, 0x1, 0xc7, 0x1, 0x600, 0xc5, 0x4, 0x0, 0x9d}) chown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0x0, 0x6}}, 0x18) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x3e}, 0x4048081) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x3, {0x0, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xfff3, 0x10}, {0xfff1, 0xb}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 11.437309ms ago: executing program 3 (id=14186): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x2, 0x1, 0xc7, 0x1, 0x600, 0xc5, 0x4, 0x0, 0x9d}) chown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0x0, 0x6}}, 0x18) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x3e}, 0x4048081) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x3, {0x0, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xfff3, 0x10}, {0xfff1, 0xb}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 0s ago: executing program 8 (id=14187): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) kernel console output (not intermixed with test programs): h1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.764515][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.807801][ T7276] team0: Port device team_slave_0 added [ 810.823742][ T7276] team0: Port device team_slave_1 added [ 810.830505][ T99] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.843354][ T7261] Process accounting resumed [ 810.868014][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.875126][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.901124][ T7276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.941268][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.948451][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.974802][ T7276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.004727][ T99] bridge_slave_1: left allmulticast mode [ 811.010450][ T99] bridge_slave_1: left promiscuous mode [ 811.016195][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.024683][ T99] bridge_slave_0: left allmulticast mode [ 811.030372][ T99] bridge_slave_0: left promiscuous mode [ 811.036178][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.186542][ T7276] hsr_slave_0: entered promiscuous mode [ 811.211892][ T7276] hsr_slave_1: entered promiscuous mode [ 811.224788][ T7276] debugfs: 'hsr0' already exists in 'hsr' [ 811.230591][ T7276] Cannot create hsr debugfs directory [ 811.236965][ T99] tipc: Disabling bearer [ 811.242276][ T99] tipc: Left network mode [ 811.282569][ T99] hsr_slave_0: left promiscuous mode [ 811.294124][ T99] hsr_slave_1: left promiscuous mode [ 811.312652][ T99] veth1_macvtap: left promiscuous mode [ 811.325921][ T99] veth0_macvtap: left promiscuous mode [ 811.340671][ T99] veth1_vlan: left promiscuous mode [ 811.351589][ T99] veth0_vlan: left promiscuous mode [ 811.481684][ T99] team0 (unregistering): Port device team_slave_1 removed [ 811.499184][ T99] team0 (unregistering): Port device team_slave_0 removed [ 811.549532][T14106] infiniband syz: ib_query_port failed (-19) [ 811.701415][ T7329] lo speed is unknown, defaulting to 1000 [ 811.846551][ T7343] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 811.962113][ T7276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 811.995632][ T7276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 812.125185][ T7348] loop8: detected capacity change from 0 to 512 [ 812.133458][ T7348] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 812.208335][ T7347] lo speed is unknown, defaulting to 1000 [ 812.245805][ T7276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 812.255493][ T7276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 812.300217][ T7357] serio: Serial port ttyS3 [ 812.354547][ T7348] EXT4-fs (loop8): 1 truncate cleaned up [ 812.361167][ T7348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.474320][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.490692][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.501746][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.509032][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.538050][ T7276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 812.548616][ T7276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.563076][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.570194][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.640351][ T7367] netlink: 'syz.7.13267': attribute type 4 has an invalid length. [ 812.663696][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.679446][ T7345] Process accounting resumed [ 812.744278][ T7369] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 812.755644][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.878737][ T7276] veth0_vlan: entered promiscuous mode [ 812.921178][ T7276] veth1_vlan: entered promiscuous mode [ 812.948523][ T7276] veth0_macvtap: entered promiscuous mode [ 812.956769][ T7276] veth1_macvtap: entered promiscuous mode [ 812.970125][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.005933][ T7381] lo speed is unknown, defaulting to 1000 [ 813.072641][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.086269][T21509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.155161][T21509] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.252233][T21509] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.336170][T21509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.359741][ T7389] program syz.1.13244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.380967][ T7393] loop5: detected capacity change from 0 to 512 [ 813.390451][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 813.390476][ T29] audit: type=1400 audit(1768347534.785:82724): avc: denied { append } for pid=7388 comm="syz.1.13244" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 813.424971][ T7393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 813.462429][ T7393] tipc: Enabled bearer , priority 0 [ 813.471583][ T7393] tipc: Disabling bearer [ 813.484562][ T7396] lo speed is unknown, defaulting to 1000 [ 813.618238][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.664607][ T7408] netlink: 'syz.8.13277': attribute type 4 has an invalid length. [ 813.679920][ T7409] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 813.951120][ T7414] lo speed is unknown, defaulting to 1000 [ 814.064998][ T7414] loop5: detected capacity change from 0 to 512 [ 814.095876][ T7414] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 814.125388][ T7414] EXT4-fs (loop5): 1 truncate cleaned up [ 814.132054][ T7414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.492170][ T7412] Process accounting resumed [ 814.583548][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.596905][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13284'. [ 814.606102][ T7424] net_ratelimit: 2 callbacks suppressed [ 814.606118][ T7424] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 814.627878][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13284'. [ 814.628584][ T29] audit: type=1400 audit(1768347536.055:82725): avc: denied { ioctl } for pid=7423 comm="syz.7.13284" path="socket:[163246]" dev="sockfs" ino=163246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 814.662089][ T29] audit: type=1400 audit(1768347536.055:82726): avc: denied { bind } for pid=7423 comm="syz.7.13284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 814.713835][ T29] audit: type=1400 audit(1768347536.145:82727): avc: denied { getopt } for pid=7428 comm="syz.1.13286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 814.730212][ T7411] Process accounting resumed [ 814.773739][ T7433] FAULT_INJECTION: forcing a failure. [ 814.773739][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 814.786526][ T7433] CPU: 1 UID: 0 PID: 7433 Comm: syz.5.13287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 814.786561][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.786634][ T7433] Call Trace: [ 814.786641][ T7433] [ 814.786649][ T7433] __dump_stack+0x1d/0x30 [ 814.786682][ T7433] dump_stack_lvl+0x95/0xd0 [ 814.786741][ T7433] dump_stack+0x15/0x1b [ 814.786764][ T7433] should_fail_ex+0x265/0x280 [ 814.786842][ T7433] should_failslab+0x8c/0xb0 [ 814.786903][ T7433] __kvmalloc_node_noprof+0x149/0x6b0 [ 814.786937][ T7433] ? xt_alloc_entry_offsets+0x4d/0x60 [ 814.786980][ T7433] ? refill_obj_stock+0x254/0x2e0 [ 814.787091][ T7433] xt_alloc_entry_offsets+0x4d/0x60 [ 814.787253][ T7433] translate_table+0xa9/0x1070 [ 814.787276][ T7433] ? __rcu_read_unlock+0x4f/0x70 [ 814.787348][ T7433] ? should_fail_ex+0xdb/0x280 [ 814.787377][ T7433] ? _copy_from_user+0x89/0xb0 [ 814.787419][ T7433] do_ip6t_set_ctl+0x678/0x840 [ 814.787521][ T7433] nf_setsockopt+0x199/0x1b0 [ 814.787545][ T7433] ipv6_setsockopt+0x11a/0x130 [ 814.787570][ T7433] udpv6_setsockopt+0x99/0xb0 [ 814.787609][ T7433] sock_common_setsockopt+0x69/0x80 [ 814.787671][ T7433] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 814.787693][ T7433] __sys_setsockopt+0x184/0x200 [ 814.787723][ T7433] __x64_sys_setsockopt+0x64/0x80 [ 814.787806][ T7433] x64_sys_call+0x21d5/0x3000 [ 814.787831][ T7433] do_syscall_64+0xca/0x2b0 [ 814.787907][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.787936][ T7433] RIP: 0033:0x7f0e89a2f749 [ 814.788017][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.788036][ T7433] RSP: 002b:00007f0e8848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 814.788055][ T7433] RAX: ffffffffffffffda RBX: 00007f0e89c85fa0 RCX: 00007f0e89a2f749 [ 814.788068][ T7433] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 814.788085][ T7433] RBP: 00007f0e8848f090 R08: 0000000000000590 R09: 0000000000000000 [ 814.788101][ T7433] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.788129][ T7433] R13: 00007f0e89c86038 R14: 00007f0e89c85fa0 R15: 00007ffd28f098f8 [ 814.788161][ T7433] [ 815.046311][ T7442] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 815.132520][ T7440] lo speed is unknown, defaulting to 1000 [ 815.162016][ T7450] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 815.313348][ T7454] lo speed is unknown, defaulting to 1000 [ 816.031534][ T29] audit: type=1326 audit(1768347536.625:82728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.1.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 816.055262][ T29] audit: type=1326 audit(1768347536.625:82729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.1.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 816.078870][ T29] audit: type=1326 audit(1768347536.625:82730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.1.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 816.102596][ T29] audit: type=1326 audit(1768347536.625:82731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.1.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 816.126393][ T29] audit: type=1326 audit(1768347536.625:82732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.1.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 816.150283][ T29] audit: type=1326 audit(1768347536.625:82733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7437 comm="syz.1.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 816.338207][ T7456] lo speed is unknown, defaulting to 1000 [ 816.384513][ T7456] loop5: detected capacity change from 0 to 512 [ 816.391625][ T7456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 816.399849][ T7462] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 816.411543][ T7456] EXT4-fs (loop5): 1 truncate cleaned up [ 816.417778][ T7456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.727350][ T7468] loop8: detected capacity change from 0 to 512 [ 816.736758][ T7468] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 816.812408][ T7467] lo speed is unknown, defaulting to 1000 [ 816.852530][ T7468] EXT4-fs (loop8): 1 truncate cleaned up [ 816.859125][ T7468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.087026][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.104202][ T7466] Process accounting resumed [ 817.186607][ T7474] lo speed is unknown, defaulting to 1000 [ 817.315707][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.363061][ T7489] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 817.424579][ T7495] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 817.605011][ T7499] lo speed is unknown, defaulting to 1000 [ 818.403528][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 818.403614][ T29] audit: type=1326 audit(1768347539.805:82766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7473 comm="syz.5.13299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 818.464261][ T7498] lo speed is unknown, defaulting to 1000 [ 818.505272][ T29] audit: type=1400 audit(1768347539.935:82767): avc: denied { write } for pid=7503 comm="syz.1.13311" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 818.547140][ T7508] lo speed is unknown, defaulting to 1000 [ 818.561894][ T29] audit: type=1400 audit(1768347539.985:82768): avc: denied { mount } for pid=7503 comm="syz.1.13311" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 818.766788][ T29] audit: type=1326 audit(1768347540.185:82769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.3.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae5d8f749 code=0x7ffc0000 [ 818.790561][ T29] audit: type=1326 audit(1768347540.185:82770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.3.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae5d8f749 code=0x7ffc0000 [ 818.814212][ T29] audit: type=1326 audit(1768347540.185:82771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.3.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ae5d8f749 code=0x7ffc0000 [ 818.838101][ T29] audit: type=1326 audit(1768347540.185:82772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.3.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae5d8f749 code=0x7ffc0000 [ 818.862138][ T29] audit: type=1326 audit(1768347540.185:82773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.3.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ae5d8f749 code=0x7ffc0000 [ 818.886079][ T29] audit: type=1326 audit(1768347540.185:82774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.3.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae5d8f749 code=0x7ffc0000 [ 818.910144][ T29] audit: type=1326 audit(1768347540.185:82775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.3.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2ae5d8f749 code=0x7ffc0000 [ 818.980092][ T7519] netlink: 'syz.8.13314': attribute type 4 has an invalid length. [ 818.987831][ T7521] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 819.003040][ T7523] netlink: 'syz.7.13315': attribute type 4 has an invalid length. [ 819.275917][ T7529] lo speed is unknown, defaulting to 1000 [ 820.042670][ T7541] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 820.088637][ T7544] lo speed is unknown, defaulting to 1000 [ 820.175245][ T7556] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 820.325479][ T7557] lo speed is unknown, defaulting to 1000 [ 821.190155][ T7560] lo speed is unknown, defaulting to 1000 [ 821.236475][ T7560] loop5: detected capacity change from 0 to 512 [ 821.243845][ T7560] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 821.284540][ T7560] EXT4-fs (loop5): 1 truncate cleaned up [ 821.290635][ T7560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.313370][ T7567] lo speed is unknown, defaulting to 1000 [ 821.501916][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.588246][ T7574] FAULT_INJECTION: forcing a failure. [ 821.588246][ T7574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.601416][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.8.13329 Not tainted syzkaller #0 PREEMPT(voluntary) [ 821.601454][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.601471][ T7574] Call Trace: [ 821.601478][ T7574] [ 821.601486][ T7574] __dump_stack+0x1d/0x30 [ 821.601517][ T7574] dump_stack_lvl+0x95/0xd0 [ 821.601593][ T7574] dump_stack+0x15/0x1b [ 821.601620][ T7574] should_fail_ex+0x265/0x280 [ 821.601649][ T7574] should_fail+0xb/0x20 [ 821.601678][ T7574] should_fail_usercopy+0x1a/0x20 [ 821.601702][ T7574] _copy_from_user+0x1c/0xb0 [ 821.601736][ T7574] __sys_bpf+0x183/0x7c0 [ 821.601834][ T7574] __x64_sys_bpf+0x41/0x50 [ 821.601874][ T7574] x64_sys_call+0x28e1/0x3000 [ 821.601907][ T7574] do_syscall_64+0xca/0x2b0 [ 821.601943][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.602003][ T7574] RIP: 0033:0x7f541697f749 [ 821.602048][ T7574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.602072][ T7574] RSP: 002b:00007f54153e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 821.602104][ T7574] RAX: ffffffffffffffda RBX: 00007f5416bd5fa0 RCX: 00007f541697f749 [ 821.602117][ T7574] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000002 [ 821.602134][ T7574] RBP: 00007f54153e7090 R08: 0000000000000000 R09: 0000000000000000 [ 821.602150][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.602166][ T7574] R13: 00007f5416bd6038 R14: 00007f5416bd5fa0 R15: 00007ffc5a1b59b8 [ 821.602199][ T7574] [ 821.888223][ T7583] lo speed is unknown, defaulting to 1000 [ 821.910975][ T7585] serio: Serial port ttyS3 [ 822.046303][ T7595] netlink: 'syz.1.13335': attribute type 4 has an invalid length. [ 822.194576][ T7599] lo speed is unknown, defaulting to 1000 [ 822.466614][ T7602] lo speed is unknown, defaulting to 1000 [ 822.530315][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.597735][ T7615] FAULT_INJECTION: forcing a failure. [ 822.597735][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 822.610492][ T7615] CPU: 0 UID: 0 PID: 7615 Comm: syz.1.13339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 822.610528][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.610689][ T7615] Call Trace: [ 822.610699][ T7615] [ 822.610710][ T7615] __dump_stack+0x1d/0x30 [ 822.610742][ T7615] dump_stack_lvl+0x95/0xd0 [ 822.610769][ T7615] dump_stack+0x15/0x1b [ 822.610857][ T7615] should_fail_ex+0x265/0x280 [ 822.610888][ T7615] should_failslab+0x8c/0xb0 [ 822.610928][ T7615] __kmalloc_noprof+0xb9/0x5a0 [ 822.610954][ T7615] ? alloc_pipe_info+0x1c9/0x340 [ 822.610974][ T7615] ? alloc_pipe_info+0xae/0x340 [ 822.611056][ T7615] alloc_pipe_info+0x1c9/0x340 [ 822.611082][ T7615] splice_direct_to_actor+0x592/0x680 [ 822.611110][ T7615] ? perf_cgroup_switch+0x10c/0x480 [ 822.611132][ T7615] ? __pfx_direct_splice_actor+0x10/0x10 [ 822.611152][ T7615] ? avc_policy_seqno+0x15/0x30 [ 822.611225][ T7615] ? selinux_file_permission+0x1e2/0x320 [ 822.611257][ T7615] do_splice_direct+0xda/0x150 [ 822.611345][ T7615] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 822.611372][ T7615] do_sendfile+0x380/0x650 [ 822.611425][ T7615] __x64_sys_sendfile64+0x105/0x150 [ 822.611565][ T7615] x64_sys_call+0x2db1/0x3000 [ 822.611590][ T7615] do_syscall_64+0xca/0x2b0 [ 822.611631][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.611657][ T7615] RIP: 0033:0x7fd57ef5f749 [ 822.611686][ T7615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.611714][ T7615] RSP: 002b:00007fd57d985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 822.611737][ T7615] RAX: ffffffffffffffda RBX: 00007fd57f1b6180 RCX: 00007fd57ef5f749 [ 822.611754][ T7615] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 822.611857][ T7615] RBP: 00007fd57d985090 R08: 0000000000000000 R09: 0000000000000000 [ 822.611874][ T7615] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 822.611890][ T7615] R13: 00007fd57f1b6218 R14: 00007fd57f1b6180 R15: 00007fff9d5b9fd8 [ 822.611913][ T7615] [ 823.027694][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.095811][ T7624] tipc: Enabling of bearer rejected, failed to enable media [ 823.114449][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.192119][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.226767][ T7602] chnl_net:caif_netlink_parms(): no params data found [ 823.330618][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.337847][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.361063][ T7602] bridge_slave_0: entered allmulticast mode [ 823.374789][ T7602] bridge_slave_0: entered promiscuous mode [ 823.400077][ T7602] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.407393][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.428710][ T7602] bridge_slave_1: entered allmulticast mode [ 823.435731][ T7602] bridge_slave_1: entered promiscuous mode [ 823.665280][ T42] bridge_slave_1: left allmulticast mode [ 823.671090][ T42] bridge_slave_1: left promiscuous mode [ 823.676856][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.686086][ T42] bridge_slave_0: left allmulticast mode [ 823.691786][ T42] bridge_slave_0: left promiscuous mode [ 823.697494][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.747077][ T7617] Process accounting resumed [ 823.890165][ T7642] serio: Serial port ttyS3 [ 823.901921][ T7622] Process accounting resumed [ 823.965960][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.976303][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.986457][ T42] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 823.996205][ T42] bond0 (unregistering): Released all slaves [ 824.016541][ T7602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.027567][ T7602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.050773][ T42] tipc: Left network mode [ 824.056514][ T7602] team0: Port device team_slave_0 added [ 824.063763][ T7602] team0: Port device team_slave_1 added [ 824.077795][ T42] hsr_slave_0: left promiscuous mode [ 824.085067][ T42] hsr_slave_1: left promiscuous mode [ 824.092736][ T42] veth1_macvtap: left promiscuous mode [ 824.098798][ T42] veth0_macvtap: left promiscuous mode [ 824.104795][ T42] veth1_vlan: left promiscuous mode [ 824.110259][ T42] veth0_vlan: left promiscuous mode [ 824.232810][ T42] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 824.245286][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 824.245303][ T29] audit: type=1326 audit(1768347545.675:82796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.276865][ T29] audit: type=1326 audit(1768347545.705:82797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.300735][ T29] audit: type=1326 audit(1768347545.705:82798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.324519][ T29] audit: type=1326 audit(1768347545.705:82799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.348967][ T42] team0 (unregistering): Port device team_slave_1 removed [ 824.359520][ T29] audit: type=1326 audit(1768347545.775:82800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.383499][ T29] audit: type=1326 audit(1768347545.775:82801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.407385][ T29] audit: type=1326 audit(1768347545.775:82802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.431764][ T29] audit: type=1326 audit(1768347545.775:82803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.455502][ T29] audit: type=1326 audit(1768347545.775:82804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.479241][ T29] audit: type=1326 audit(1768347545.775:82805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.7.13349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 824.503167][ T42] team0 (unregistering): Port device team_slave_0 removed [ 824.588462][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.595702][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.621847][ T7602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.704945][ T7602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.711946][ T7602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.737927][ T7602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.814695][ T7660] serio: Serial port ttyS3 [ 824.825460][ T7650] lo speed is unknown, defaulting to 1000 [ 824.848161][ T7652] lo speed is unknown, defaulting to 1000 [ 824.883771][ T7602] hsr_slave_0: entered promiscuous mode [ 824.894172][ T7602] hsr_slave_1: entered promiscuous mode [ 824.906548][ T7602] debugfs: 'hsr0' already exists in 'hsr' [ 824.912324][ T7602] Cannot create hsr debugfs directory [ 825.007969][ T42] IPVS: stop unused estimator thread 0... [ 825.115438][ T7672] loop5: detected capacity change from 0 to 512 [ 825.143637][ T7672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 825.197172][ T7682] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 825.206336][ T7672] tipc: Enabled bearer , priority 0 [ 825.214608][ T7672] tipc: Disabling bearer [ 825.227966][ T7677] lo speed is unknown, defaulting to 1000 [ 825.357135][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.471638][ T7688] lo speed is unknown, defaulting to 1000 [ 825.694938][ T7602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 825.870238][ T7602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 825.894551][ T7602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 825.930288][ T7602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 826.016481][ T7602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.036346][ T7602] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.046099][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.053356][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.128522][ T7602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 826.139013][ T7602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 826.152693][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.159852][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.239066][ T7704] lo speed is unknown, defaulting to 1000 [ 826.249024][ T7690] Process accounting resumed [ 826.312253][ T7602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.346054][ T7711] lo speed is unknown, defaulting to 1000 [ 826.415845][ T7715] lo speed is unknown, defaulting to 1000 [ 826.481192][ T7724] loop5: detected capacity change from 0 to 512 [ 826.495674][ T7724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 826.516446][ T7602] veth0_vlan: entered promiscuous mode [ 826.528993][ T7602] veth1_vlan: entered promiscuous mode [ 826.540682][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.562474][ T7602] veth0_macvtap: entered promiscuous mode [ 826.571194][ T7602] veth1_macvtap: entered promiscuous mode [ 826.588447][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.616034][ T7602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.628673][T21485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.672426][T21485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.707224][T21485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.729660][T21485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.764987][ T7738] netlink: 'syz.7.13371': attribute type 4 has an invalid length. [ 826.785737][ T7736] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 826.881455][ T7751] loop8: detected capacity change from 0 to 512 [ 826.901235][ T7748] lo speed is unknown, defaulting to 1000 [ 826.902402][ T7751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 826.972662][ T7758] loop5: detected capacity change from 0 to 512 [ 827.000483][ T7751] tipc: Enabled bearer , priority 0 [ 827.025212][ T7758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 827.039272][ T7751] tipc: Disabling bearer [ 827.095752][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.142432][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.167640][ T7763] loop5: detected capacity change from 0 to 512 [ 827.181267][ T7763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 827.209281][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.251929][ T7768] lo speed is unknown, defaulting to 1000 [ 827.331994][ T7771] lo speed is unknown, defaulting to 1000 [ 827.419341][ T7776] lo speed is unknown, defaulting to 1000 [ 827.689652][ T7783] netlink: 'syz.5.13384': attribute type 7 has an invalid length. [ 827.707605][ T7742] Process accounting resumed [ 827.812717][ T7790] netlink: 'syz.1.13387': attribute type 4 has an invalid length. [ 828.000673][ T7800] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 828.231203][ T7804] lo speed is unknown, defaulting to 1000 [ 828.418098][ T7811] lo speed is unknown, defaulting to 1000 [ 828.901481][ T7826] loop8: detected capacity change from 0 to 512 [ 828.948806][ T7826] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 828.979153][ T7832] lo speed is unknown, defaulting to 1000 [ 829.009595][ T7834] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 829.173430][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.274619][ T7845] lo speed is unknown, defaulting to 1000 [ 829.386951][ T7845] loop5: detected capacity change from 0 to 512 [ 829.397690][ T7845] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 829.500342][ T7841] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 829.726899][ T7845] EXT4-fs (loop5): 1 truncate cleaned up [ 829.733506][ T7845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.074998][ T7852] lo speed is unknown, defaulting to 1000 [ 830.140687][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.191096][ T7843] lo speed is unknown, defaulting to 1000 [ 830.457676][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 830.457696][ T29] audit: type=1326 audit(1768347551.885:82841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.7.13409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 830.521157][ T7857] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 830.560421][ T29] audit: type=1326 audit(1768347551.885:82842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.7.13409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 830.584839][ T29] audit: type=1326 audit(1768347551.895:82843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.7.13409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 830.608575][ T29] audit: type=1326 audit(1768347551.895:82844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.7.13409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 830.651653][ T7872] lo speed is unknown, defaulting to 1000 [ 830.699469][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13413'. [ 830.715812][ T7877] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 830.745179][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13413'. [ 830.906715][ T7879] lo speed is unknown, defaulting to 1000 [ 830.928672][ T7883] loop8: detected capacity change from 0 to 512 [ 830.935752][ T7883] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 830.951114][ T7883] EXT4-fs (loop8): 1 truncate cleaned up [ 830.957097][ T7882] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 830.957929][ T7883] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.185287][ T7889] lo speed is unknown, defaulting to 1000 [ 831.610613][ T7898] lo speed is unknown, defaulting to 1000 [ 831.625520][ T29] audit: type=1326 audit(1768347553.055:82845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.5.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 831.657503][ T7903] netlink: 'syz.7.13420': attribute type 4 has an invalid length. [ 831.735826][ T29] audit: type=1326 audit(1768347553.085:82846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.5.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 831.764539][ T29] audit: type=1326 audit(1768347553.085:82847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.5.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 831.791567][ T29] audit: type=1326 audit(1768347553.085:82848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.5.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 831.821135][ T29] audit: type=1326 audit(1768347553.085:82849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.5.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 831.847137][ T29] audit: type=1326 audit(1768347553.085:82850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.5.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 832.003021][ T7912] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 832.243162][ T7916] lo speed is unknown, defaulting to 1000 [ 832.658301][ T7923] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 832.812664][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.963526][ T7931] lo speed is unknown, defaulting to 1000 [ 833.044045][ T7930] lo speed is unknown, defaulting to 1000 [ 833.322174][ T7933] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 833.346057][ T7941] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 834.290080][ T7945] lo speed is unknown, defaulting to 1000 [ 834.368293][ T7946] lo speed is unknown, defaulting to 1000 [ 834.491805][ T7946] loop8: detected capacity change from 0 to 512 [ 834.531402][ T7946] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 834.542386][ T7948] tipc: Started in network mode [ 834.547352][ T7948] tipc: Node identity 4ecbd03789e4, cluster identity 4711 [ 834.554646][ T7948] tipc: Enabled bearer , priority 0 [ 834.562397][ T7946] EXT4-fs (loop8): 1 truncate cleaned up [ 834.568721][ T7946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.598408][ T7948] tipc: Disabling bearer [ 834.675892][ T7960] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 834.833199][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.942549][ T7974] lo speed is unknown, defaulting to 1000 [ 835.065488][ T7978] lo speed is unknown, defaulting to 1000 [ 835.408110][ T7987] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 835.645046][ T7994] lo speed is unknown, defaulting to 1000 [ 835.701715][ T7994] loop8: detected capacity change from 0 to 512 [ 835.712533][ T7994] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 835.784624][ T7994] EXT4-fs (loop8): 1 truncate cleaned up [ 835.791449][ T7994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.836952][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 835.836966][ T29] audit: type=1326 audit(1768347557.265:82941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 836.050928][ T29] audit: type=1326 audit(1768347557.325:82942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 836.074915][ T29] audit: type=1326 audit(1768347557.325:82943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 836.098978][ T29] audit: type=1326 audit(1768347557.325:82944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 836.122738][ T29] audit: type=1326 audit(1768347557.325:82945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 836.147229][ T29] audit: type=1326 audit(1768347557.325:82946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 836.172312][ T29] audit: type=1326 audit(1768347557.325:82947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 836.196495][ T29] audit: type=1326 audit(1768347557.325:82948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc57f45f783 code=0x7ffc0000 [ 836.220928][ T29] audit: type=1326 audit(1768347557.345:82949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc57f45e1ff code=0x7ffc0000 [ 836.245657][ T29] audit: type=1326 audit(1768347557.345:82950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.7.13446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc57f45f7d7 code=0x7ffc0000 [ 836.352615][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.505511][ T7990] Process accounting resumed [ 836.824301][ T8026] netlink: 'syz.3.13457': attribute type 4 has an invalid length. [ 837.057137][ T8030] lo speed is unknown, defaulting to 1000 [ 837.413049][ T8036] xt_socket: unknown flags 0x50 [ 838.117028][ T8065] lo speed is unknown, defaulting to 1000 [ 838.844391][ T8080] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 839.029193][ T8082] lo speed is unknown, defaulting to 1000 [ 839.157145][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13478'. [ 839.242649][ T8089] lo speed is unknown, defaulting to 1000 [ 839.325593][ T8098] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 839.446519][ T8096] netlink: 'syz.5.13482': attribute type 4 has an invalid length. [ 839.479007][ T8102] netlink: 'syz.8.13483': attribute type 4 has an invalid length. [ 839.523861][ T8101] lo speed is unknown, defaulting to 1000 [ 839.599678][ T8106] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.13484' sets config #-7 [ 839.781797][ T8117] loop5: detected capacity change from 0 to 512 [ 839.803153][ T8117] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 839.829558][ T8117] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13489: bg 0: block 255: padding at end of block bitmap is not set [ 839.856730][ T8117] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 839.870457][ T8117] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.13489: invalid indirect mapped block 1 (level 1) [ 839.888023][ T8117] EXT4-fs (loop5): 1 truncate cleaned up [ 839.894662][ T8117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.919141][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13489'. [ 840.525455][ T8134] netlink: 'syz.1.13495': attribute type 4 has an invalid length. [ 840.731468][ T8137] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 840.817773][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.832313][ T8141] tipc: Started in network mode [ 840.832378][ T8141] tipc: Node identity aa4cf027dd2f, cluster identity 4711 [ 840.832422][ T8141] tipc: Enabled bearer , priority 0 [ 840.841199][ T8141] tipc: Disabling bearer [ 840.896025][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13499'. [ 840.909605][ T8151] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 841.064234][ T8154] lo speed is unknown, defaulting to 1000 [ 841.911367][ T8164] tipc: Enabled bearer , priority 0 [ 841.926016][ T8158] lo speed is unknown, defaulting to 1000 [ 841.957050][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13506'. [ 841.966558][ T8166] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 841.979782][ T8166] loop5: detected capacity change from 0 to 1024 [ 841.987164][ T8166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 841.995981][ T8164] tipc: Disabling bearer [ 842.012979][ T8166] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 842.021385][ T8166] System zones: 0-1, 3-36 [ 842.029071][ T8166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.043383][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 842.043401][ T29] audit: type=1400 audit(1768347563.475:82992): avc: denied { write } for pid=8161 comm="syz.7.13504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 842.047937][ T8171] netlink: 'syz.7.13504': attribute type 10 has an invalid length. [ 842.095221][ T8171] team0: Failed to send options change via netlink (err -105) [ 842.102987][ T8171] team0: Port device dummy0 added [ 842.121046][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13506'. [ 842.188508][ T8177] syzkaller0: entered promiscuous mode [ 842.194076][ T8177] syzkaller0: entered allmulticast mode [ 842.277679][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.760517][ T8198] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 842.984612][ T8200] lo speed is unknown, defaulting to 1000 [ 843.093649][ T8178] Process accounting resumed [ 843.129689][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13518'. [ 843.177503][ T29] audit: type=1400 audit(1768347564.605:82993): avc: denied { mount } for pid=8202 comm="syz.8.13518" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 843.295738][ T8205] lo speed is unknown, defaulting to 1000 [ 843.330894][ T8208] serio: Serial port ttyS3 [ 843.348376][ T29] audit: type=1400 audit(1768347564.685:82994): avc: denied { unmount } for pid=3044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 843.396569][ T8194] Process accounting resumed [ 843.450428][ T8212] serio: Serial port ttyS3 [ 843.507709][ T29] audit: type=1400 audit(1768347564.935:82995): avc: denied { write } for pid=8216 comm="syz.1.13523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 843.537742][ T29] audit: type=1400 audit(1768347564.965:82996): avc: denied { create } for pid=8216 comm="syz.1.13523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 843.658937][ T29] audit: type=1326 audit(1768347565.085:82997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.7.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 843.712984][ T29] audit: type=1326 audit(1768347565.085:82998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.7.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 843.736726][ T29] audit: type=1326 audit(1768347565.085:82999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.7.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 843.760491][ T29] audit: type=1326 audit(1768347565.085:83000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.7.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 843.784639][ T29] audit: type=1326 audit(1768347565.085:83001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.7.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 843.795450][ T8227] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 843.958423][ T8226] lo speed is unknown, defaulting to 1000 [ 844.175549][ T8235] lo speed is unknown, defaulting to 1000 [ 844.382258][ T8241] lo speed is unknown, defaulting to 1000 [ 844.571268][ T8247] lo speed is unknown, defaulting to 1000 [ 844.692645][ T8250] IPv6: addrconf: prefix option has invalid lifetime [ 844.885304][ T8260] netlink: 'syz.3.13537': attribute type 4 has an invalid length. [ 845.004105][ T8264] lo speed is unknown, defaulting to 1000 [ 845.347133][ T8279] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 845.467395][ T8276] netlink: 'syz.5.13543': attribute type 4 has an invalid length. [ 845.585925][ T8285] lo speed is unknown, defaulting to 1000 [ 846.011562][ T8293] lo speed is unknown, defaulting to 1000 [ 846.071795][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13548'. [ 846.233939][ T8304] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 846.504891][ T8307] lo speed is unknown, defaulting to 1000 [ 846.696217][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.8.13553'. [ 846.983133][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13556'. [ 846.992458][ T8317] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 847.007680][ T8317] loop8: detected capacity change from 0 to 1024 [ 847.016303][ T8317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 847.040360][ T8317] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 847.053188][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13558'. [ 847.083928][ T8317] System zones: 0-1, 3-36 [ 847.146875][ T8317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.177104][ T8329] tipc: Enabled bearer , priority 0 [ 847.194585][ T8329] tipc: Disabling bearer [ 847.205971][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13556'. [ 847.227289][ T8330] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 847.358502][ T8333] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 847.486575][ T8337] lo speed is unknown, defaulting to 1000 [ 848.320558][ T8340] lo speed is unknown, defaulting to 1000 [ 848.380576][ T8347] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 848.551396][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.572946][ T8356] loop5: detected capacity change from 0 to 512 [ 848.579619][ T8356] EXT4-fs: Ignoring removed nobh option [ 848.585496][ T8355] tipc: Enabling of bearer rejected, failed to enable media [ 848.594638][ T8356] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 848.646991][ T8356] loop5: detected capacity change from 0 to 128 [ 848.665221][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 848.665236][ T29] audit: type=1400 audit(1768347570.095:83052): avc: denied { mount } for pid=8354 comm="syz.5.13569" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 848.697391][ T8357] lo speed is unknown, defaulting to 1000 [ 848.751394][ T8364] lo speed is unknown, defaulting to 1000 [ 848.806274][ T29] audit: type=1400 audit(1768347570.235:83053): avc: denied { getopt } for pid=8373 comm="syz.1.13574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 848.828555][ T8374] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13574'. [ 848.846087][ T29] audit: type=1400 audit(1768347570.265:83054): avc: denied { name_bind } for pid=8373 comm="syz.1.13574" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 848.868190][ T8374] geneve2: entered promiscuous mode [ 848.873477][ T8374] geneve2: entered allmulticast mode [ 849.120670][ T8385] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 849.142279][ T8387] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 850.120206][ T8390] lo speed is unknown, defaulting to 1000 [ 850.195172][ T8391] lo speed is unknown, defaulting to 1000 [ 850.238660][ T29] audit: type=1400 audit(1768347571.665:83055): avc: denied { unmount } for pid=6613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 850.337398][ T29] audit: type=1326 audit(1768347571.765:83056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.8.13582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x0 [ 850.433426][ T29] audit: type=1400 audit(1768347571.865:83057): avc: denied { read } for pid=8404 comm="syz.3.13584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 850.460618][ T8405] vcan0: tx address claim with different name [ 850.512812][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13588'. [ 850.522145][ T8419] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 850.540438][ T8417] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 850.563151][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13588'. [ 850.611811][ T8421] lo speed is unknown, defaulting to 1000 [ 850.785789][ T8432] lo speed is unknown, defaulting to 1000 [ 851.225951][ T8436] lo speed is unknown, defaulting to 1000 [ 851.250292][ T8396] Process accounting resumed [ 851.543019][ T29] audit: type=1326 audit(1768347572.975:83058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.3.13599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a0c6f749 code=0x7ffc0000 [ 851.602501][ T29] audit: type=1326 audit(1768347573.005:83059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.3.13599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a0c6f749 code=0x7ffc0000 [ 851.626548][ T29] audit: type=1326 audit(1768347573.005:83060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.3.13599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a0c6f749 code=0x7ffc0000 [ 851.650199][ T29] audit: type=1326 audit(1768347573.005:83061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.3.13599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a0c6f749 code=0x7ffc0000 [ 851.736140][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13603'. [ 851.749319][ T8465] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 851.767868][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13603'. [ 851.780441][ T8466] SELinux: Context system_u:object_r:hugetlbfs_t:s0 is not valid (left unmapped). [ 851.810617][ T8472] serio: Serial port ttyS3 [ 851.907686][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13613'. [ 851.931085][ T8488] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 851.939922][ T8486] lo speed is unknown, defaulting to 1000 [ 852.010873][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13613'. [ 852.061881][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13615'. [ 852.090177][ T8497] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 852.182461][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13615'. [ 852.219546][ T8504] netlink: 'syz.5.13617': attribute type 1 has an invalid length. [ 852.227576][ T8504] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13617'. [ 852.272657][ T8507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8507 comm=syz.5.13617 [ 852.350358][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13620'. [ 852.373473][ T8511] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 852.465068][ T8513] lo speed is unknown, defaulting to 1000 [ 852.471199][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13620'. [ 852.595504][ T8521] lo speed is unknown, defaulting to 1000 [ 852.749752][ T8533] loop8: detected capacity change from 0 to 512 [ 852.787135][ T8533] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 852.808405][ T8533] tipc: Enabled bearer , priority 0 [ 852.816459][ T8533] tipc: Disabling bearer [ 852.884074][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.425252][ T8556] lo speed is unknown, defaulting to 1000 [ 853.507340][ T8528] Process accounting resumed [ 853.620635][ T8564] tipc: Enabled bearer , priority 0 [ 853.628704][ T8564] tipc: Disabling bearer [ 853.740553][ T8568] lo speed is unknown, defaulting to 1000 [ 853.746993][ T8568] lo speed is unknown, defaulting to 1000 [ 853.753194][ T8568] lo speed is unknown, defaulting to 1000 [ 853.796010][ T8568] infiniband sz1: set down [ 853.800611][ T8568] infiniband sz1: added lo [ 853.805801][ T10] lo speed is unknown, defaulting to 1000 [ 853.819840][ T8568] RDS/IB: sz1: added [ 853.824030][ T8568] smc: adding ib device sz1 with port count 1 [ 853.830363][ T8568] smc: ib device sz1 port 1 has no pnetid [ 853.839532][ T10] lo speed is unknown, defaulting to 1000 [ 853.845477][ T8568] lo speed is unknown, defaulting to 1000 [ 853.858121][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13645'. [ 853.891527][ T8568] lo speed is unknown, defaulting to 1000 [ 853.933686][ T8568] lo speed is unknown, defaulting to 1000 [ 853.975784][ T8568] lo speed is unknown, defaulting to 1000 [ 854.017912][ T8568] lo speed is unknown, defaulting to 1000 [ 854.093392][ T8568] lo speed is unknown, defaulting to 1000 [ 854.252091][ T8591] loop8: detected capacity change from 0 to 512 [ 854.308430][ T8591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 854.325942][ T8588] ALSA: seq fatal error: cannot create timer (-19) [ 854.342539][ T8568] lo speed is unknown, defaulting to 1000 [ 854.405207][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.690256][ T8597] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 854.722322][ T8594] lo speed is unknown, defaulting to 1000 [ 854.728783][ T8594] lo speed is unknown, defaulting to 1000 [ 854.957151][ T8614] lo speed is unknown, defaulting to 1000 [ 855.361964][ T8614] lo speed is unknown, defaulting to 1000 [ 855.616225][ T8630] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 855.633030][ T8630] loop8: detected capacity change from 0 to 1024 [ 855.640037][ T8630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 855.663709][ T8630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 855.695257][ T8630] System zones: 0-1, 3-36 [ 855.708597][ T8630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.775378][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.858839][ T8643] loop8: detected capacity change from 0 to 512 [ 855.886987][ T8643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 855.956344][ T8643] tipc: Enabled bearer , priority 0 [ 855.999022][ T8643] tipc: Disabling bearer [ 856.097382][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.111941][ T8654] lo speed is unknown, defaulting to 1000 [ 856.118895][ T8654] lo speed is unknown, defaulting to 1000 [ 856.166751][ T8666] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 856.519653][ T8679] pim6reg: entered allmulticast mode [ 856.869477][ T8689] loop5: detected capacity change from 0 to 512 [ 856.879061][ T8689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 856.897057][ T8689] tipc: Enabled bearer , priority 0 [ 856.905725][ T8689] tipc: Disabling bearer [ 856.980346][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.129184][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 857.129202][ T29] audit: type=1326 audit(1768347578.555:83196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.5.13689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 857.354230][ T29] audit: type=1326 audit(1768347578.585:83197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.5.13689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 857.377896][ T29] audit: type=1326 audit(1768347578.585:83198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.5.13689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 857.401568][ T29] audit: type=1326 audit(1768347578.585:83199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.5.13689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 857.425276][ T29] audit: type=1326 audit(1768347578.645:83200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.7.13690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x0 [ 857.674536][ T8711] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 857.688706][ T8710] pim6reg: entered allmulticast mode [ 857.740144][ T8713] lo speed is unknown, defaulting to 1000 [ 857.752553][ T8713] lo speed is unknown, defaulting to 1000 [ 857.927687][ T8725] lo speed is unknown, defaulting to 1000 [ 857.934715][ T8725] lo speed is unknown, defaulting to 1000 [ 858.085328][ T8727] serio: Serial port ttyS3 [ 858.790608][ T8749] loop8: detected capacity change from 0 to 512 [ 858.815037][ T8749] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 858.818376][ T8751] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 858.951219][ T8749] tipc: Enabling of bearer rejected, failed to enable media [ 858.982602][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.156955][ T8761] lo speed is unknown, defaulting to 1000 [ 859.163616][ T8761] lo speed is unknown, defaulting to 1000 [ 859.489106][ T8766] __nla_validate_parse: 4 callbacks suppressed [ 859.489122][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13710'. [ 859.538930][ T8743] Process accounting resumed [ 859.722658][ T8773] serio: Serial port ttyS3 [ 859.794290][ T8782] lo speed is unknown, defaulting to 1000 [ 859.800517][ T8782] lo speed is unknown, defaulting to 1000 [ 860.445209][ T8804] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 860.710862][ T8809] lo speed is unknown, defaulting to 1000 [ 860.717284][ T8809] lo speed is unknown, defaulting to 1000 [ 860.973981][ T8812] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 861.421683][ T8791] Process accounting resumed [ 861.535666][ T8814] lo speed is unknown, defaulting to 1000 [ 861.542032][ T8814] lo speed is unknown, defaulting to 1000 [ 861.632114][ T8805] Process accounting resumed [ 861.740017][ T8827] loop8: detected capacity change from 0 to 512 [ 861.855799][ T8827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 862.066998][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.142065][ T8839] ALSA: seq fatal error: cannot create timer (-19) [ 862.448258][ T8844] lo speed is unknown, defaulting to 1000 [ 862.485176][ T8844] lo speed is unknown, defaulting to 1000 [ 862.552225][ T8816] Process accounting resumed [ 863.172636][ T8846] Process accounting resumed [ 863.201616][ T8857] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 863.462989][ T8862] lo speed is unknown, defaulting to 1000 [ 863.469431][ T8862] lo speed is unknown, defaulting to 1000 [ 863.766928][ T8865] pim6reg: entered allmulticast mode [ 864.048462][ T8871] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 864.287440][ T8883] lo speed is unknown, defaulting to 1000 [ 864.293955][ T8883] lo speed is unknown, defaulting to 1000 [ 864.499413][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13744'. [ 864.637973][ T8886] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 864.665727][ T8891] netlink: 'syz.1.13743': attribute type 4 has an invalid length. [ 864.676355][ T8888] loop8: detected capacity change from 0 to 1024 [ 864.740469][ T8888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 864.833269][ T8888] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 864.854200][ T8888] System zones: 0-1, 3-36 [ 864.866332][ T8888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.930408][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13744'. [ 864.962601][ T8896] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 865.129476][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.216464][ T8906] lo speed is unknown, defaulting to 1000 [ 865.222689][ T8906] lo speed is unknown, defaulting to 1000 [ 865.327878][ T8906] loop5: detected capacity change from 0 to 512 [ 865.344496][ T8906] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 865.365710][ T8906] EXT4-fs (loop5): 1 truncate cleaned up [ 865.372339][ T8906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.873753][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.995416][ T8928] loop8: detected capacity change from 0 to 512 [ 866.016532][ T8928] EXT4-fs: Ignoring removed nobh option [ 866.037275][ T8928] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 866.148227][ T8931] pim6reg: entered allmulticast mode [ 866.194578][ T8931] loop8: detected capacity change from 0 to 1024 [ 866.224675][ T8931] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.310161][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.404170][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13759'. [ 866.420539][ T8937] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 866.455073][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13759'. [ 866.497739][ T8942] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 866.563814][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13761'. [ 866.625287][ T8946] netlink: 136 bytes leftover after parsing attributes in process `syz.1.13762'. [ 866.635130][ T8946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 866.738670][ T8948] lo speed is unknown, defaulting to 1000 [ 866.746221][ T8948] lo speed is unknown, defaulting to 1000 [ 867.266959][ T8963] loop5: detected capacity change from 0 to 512 [ 867.274179][ T8963] EXT4-fs: Ignoring removed nobh option [ 867.280733][ T8963] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 867.316345][ T8970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 867.377707][ T8970] loop5: detected capacity change from 0 to 128 [ 867.400095][ T29] audit: type=1326 audit(1768347588.825:83201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.424467][ T29] audit: type=1326 audit(1768347588.825:83202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.482892][ T29] audit: type=1326 audit(1768347588.875:83203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.499992][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13772'. [ 867.509358][ T29] audit: type=1326 audit(1768347588.875:83204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.544546][ T29] audit: type=1326 audit(1768347588.875:83205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.552485][ T8944] Process accounting resumed [ 867.571750][ T29] audit: type=1326 audit(1768347588.875:83206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.571790][ T29] audit: type=1326 audit(1768347588.875:83207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.571822][ T29] audit: type=1326 audit(1768347588.875:83208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.650844][ T29] audit: type=1326 audit(1768347588.875:83209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 867.675178][ T29] audit: type=1326 audit(1768347588.875:83210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.13771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x0 [ 867.715999][ T8974] netlink: 136 bytes leftover after parsing attributes in process `syz.7.13772'. [ 867.725883][ T8974] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 867.797018][ T8980] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 867.818871][ T8981] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 868.800334][ T8983] lo speed is unknown, defaulting to 1000 [ 868.807569][ T8983] lo speed is unknown, defaulting to 1000 [ 868.912684][ T8986] loop8: detected capacity change from 0 to 512 [ 868.933716][ T8986] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 868.949101][ T8986] EXT4-fs (loop8): 1 truncate cleaned up [ 868.998110][ T8985] lo speed is unknown, defaulting to 1000 [ 869.004398][ T8985] lo speed is unknown, defaulting to 1000 [ 869.014580][ T8986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.107857][ T8984] netlink: 'syz.3.13776': attribute type 4 has an invalid length. [ 869.120320][ T8998] netlink: 'syz.1.13778': attribute type 4 has an invalid length. [ 869.205156][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.355860][ T9012] netlink: 'syz.8.13780': attribute type 4 has an invalid length. [ 869.441244][ T9018] netlink: 'syz.5.13784': attribute type 4 has an invalid length. [ 869.593139][ T9030] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 869.599761][ T9030] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 869.607544][ T9030] vhci_hcd vhci_hcd.0: Device attached [ 869.628524][ T9032] vhci_hcd: connection closed [ 869.628639][T21530] vhci_hcd vhci_hcd.8: stop threads [ 869.638746][T21530] vhci_hcd vhci_hcd.8: release socket [ 869.644361][T21530] vhci_hcd vhci_hcd.8: disconnect device [ 869.714913][ T9035] lo speed is unknown, defaulting to 1000 [ 869.721130][ T9035] lo speed is unknown, defaulting to 1000 [ 870.696253][ T9044] netlink: 'syz.3.13792': attribute type 4 has an invalid length. [ 870.936271][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13799'. [ 870.975059][ T9058] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 871.012639][ T9061] loop8: detected capacity change from 0 to 1024 [ 871.029813][ T9063] serio: Serial port ttyS3 [ 871.039007][ T9061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 871.057630][ T9061] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 871.077891][ T9061] System zones: 0-1, 3-36 [ 871.095263][ T9061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.166916][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13799'. [ 871.394038][ T9079] pim6reg: entered allmulticast mode [ 871.408861][ T9079] loop5: detected capacity change from 0 to 1024 [ 871.424601][ T9079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.560130][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.570405][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.579876][ T9083] serio: Serial port ttyS3 [ 871.602371][ T9085] loop5: detected capacity change from 0 to 1024 [ 871.614791][ T9085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.639123][ T9091] loop8: detected capacity change from 0 to 512 [ 871.650941][ T9091] EXT4-fs: Ignoring removed oldalloc option [ 871.658367][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.675613][ T9091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.688686][ T9091] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 871.750053][ T9100] FAULT_INJECTION: forcing a failure. [ 871.750053][ T9100] name failslab, interval 1, probability 0, space 0, times 0 [ 871.762915][ T9100] CPU: 1 UID: 0 PID: 9100 Comm: syz.5.13810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 871.762945][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.762963][ T9100] Call Trace: [ 871.762972][ T9100] [ 871.762984][ T9100] __dump_stack+0x1d/0x30 [ 871.763016][ T9100] dump_stack_lvl+0x95/0xd0 [ 871.763062][ T9100] dump_stack+0x15/0x1b [ 871.763081][ T9100] should_fail_ex+0x265/0x280 [ 871.763187][ T9100] should_failslab+0x8c/0xb0 [ 871.763211][ T9100] kmem_cache_alloc_noprof+0x69/0x4b0 [ 871.763236][ T9100] ? audit_log_start+0x342/0x720 [ 871.763263][ T9100] audit_log_start+0x342/0x720 [ 871.763291][ T9100] ? kstrtouint+0x76/0xc0 [ 871.763318][ T9100] audit_seccomp+0x48/0x100 [ 871.763399][ T9100] ? __seccomp_filter+0x832/0x1260 [ 871.763436][ T9100] __seccomp_filter+0x843/0x1260 [ 871.763489][ T9100] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 871.763528][ T9100] ? vfs_write+0x7e8/0x960 [ 871.763597][ T9100] __secure_computing+0x82/0x150 [ 871.763624][ T9100] syscall_trace_enter+0xcf/0x1e0 [ 871.763654][ T9100] do_syscall_64+0xa4/0x2b0 [ 871.763784][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.763810][ T9100] RIP: 0033:0x7f0e89a2f749 [ 871.763831][ T9100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.763855][ T9100] RSP: 002b:00007f0e8848f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 871.763980][ T9100] RAX: ffffffffffffffda RBX: 00007f0e89c85fa0 RCX: 00007f0e89a2f749 [ 871.763993][ T9100] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 871.764005][ T9100] RBP: 00007f0e8848f090 R08: 0000000000000000 R09: 0000000000000000 [ 871.764018][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.764031][ T9100] R13: 00007f0e89c86038 R14: 00007f0e89c85fa0 R15: 00007ffd28f098f8 [ 871.764056][ T9100] [ 872.214661][ T9109] lo speed is unknown, defaulting to 1000 [ 872.234416][ T9109] lo speed is unknown, defaulting to 1000 [ 872.274934][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13814'. [ 872.310925][ T9113] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 872.397106][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13814'. [ 872.951461][ T8934] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 872.969667][ T8934] EXT4-fs (loop8): Remounting filesystem read-only [ 872.980730][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13825'. [ 873.003433][ T9144] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 873.033714][ T9144] loop5: detected capacity change from 0 to 1024 [ 873.040782][ T9144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 873.061679][ T9144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 873.085555][ T9144] System zones: 0-1, 3-36 [ 873.103218][ T9144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.120956][ T9145] lo speed is unknown, defaulting to 1000 [ 873.152789][ T9145] lo speed is unknown, defaulting to 1000 [ 873.220158][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13825'. [ 873.247406][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.369743][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.598055][ T9163] lo speed is unknown, defaulting to 1000 [ 873.618699][ T9163] lo speed is unknown, defaulting to 1000 [ 873.678329][ T9140] Process accounting resumed [ 873.734927][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13829'. [ 873.745146][ T9167] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 873.791213][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13829'. [ 874.241959][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 874.241977][ T29] audit: type=1326 audit(1768347595.665:83343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.5.13838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 874.272393][ T29] audit: type=1326 audit(1768347595.665:83344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.5.13838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 874.298679][ T29] audit: type=1326 audit(1768347595.665:83345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.5.13838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 874.322781][ T29] audit: type=1326 audit(1768347595.665:83346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.5.13838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 874.697139][ T9185] Process accounting resumed [ 874.737739][ T9199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 874.747636][ T9199] loop8: detected capacity change from 0 to 128 [ 874.757859][ T29] audit: type=1326 audit(1768347596.185:83347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.8.13840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 874.782415][ T29] audit: type=1326 audit(1768347596.185:83348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.8.13840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 874.806111][ T29] audit: type=1326 audit(1768347596.185:83349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.8.13840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 874.829724][ T29] audit: type=1326 audit(1768347596.185:83350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.8.13840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 874.853522][ T29] audit: type=1326 audit(1768347596.185:83351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.8.13840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 874.877296][ T29] audit: type=1326 audit(1768347596.185:83352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.8.13840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 875.009068][ T9206] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 875.251415][ T9218] lo speed is unknown, defaulting to 1000 [ 875.258037][ T9218] lo speed is unknown, defaulting to 1000 [ 875.665436][ T9200] Process accounting resumed [ 875.898424][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13852'. [ 875.915615][ T9237] netem: change failed [ 875.949020][ T9241] lo speed is unknown, defaulting to 1000 [ 875.969374][ T9241] lo speed is unknown, defaulting to 1000 [ 876.285026][ T9259] syzkaller0: entered promiscuous mode [ 876.290716][ T9259] syzkaller0: entered allmulticast mode [ 876.506271][ T9266] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 876.788995][ T9272] lo speed is unknown, defaulting to 1000 [ 876.795723][ T9272] lo speed is unknown, defaulting to 1000 [ 877.246554][ T9271] serio: Serial port ttyS3 [ 877.326573][ T9263] Process accounting resumed [ 877.383528][ T9286] netlink: 'syz.5.13866': attribute type 4 has an invalid length. [ 877.487660][ T9293] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 877.618180][ T9299] loop8: detected capacity change from 0 to 1024 [ 877.655555][ T9299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.670185][ T9300] lo speed is unknown, defaulting to 1000 [ 877.680176][ T9300] lo speed is unknown, defaulting to 1000 [ 877.767868][ T9312] lo speed is unknown, defaulting to 1000 [ 877.792012][ T9312] lo speed is unknown, defaulting to 1000 [ 877.891337][ T9313] loop5: detected capacity change from 0 to 512 [ 877.945765][ T9313] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 877.974683][ T9313] EXT4-fs (loop5): 1 truncate cleaned up [ 877.981385][ T9313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.166271][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.401404][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.681260][ T9329] lo speed is unknown, defaulting to 1000 [ 878.714109][ T9329] lo speed is unknown, defaulting to 1000 [ 879.177452][ T9343] netlink: 'syz.8.13879': attribute type 4 has an invalid length. [ 879.232998][ T9348] serio: Serial port ttyS3 [ 879.248034][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13878'. [ 879.267712][ T9340] netem: change failed [ 879.380013][ T9354] loop8: detected capacity change from 0 to 512 [ 879.407419][ T9354] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.13884: casefold flag without casefold feature [ 879.425422][ T9354] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.13884: couldn't read orphan inode 15 (err -117) [ 879.441647][ T9354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.477796][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.544355][ T9367] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 879.809411][ T9375] lo speed is unknown, defaulting to 1000 [ 879.816173][ T9375] lo speed is unknown, defaulting to 1000 [ 879.915571][ T9376] loop8: detected capacity change from 0 to 512 [ 879.925364][ T9376] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 879.991946][ T9376] EXT4-fs (loop8): 1 truncate cleaned up [ 879.998727][ T9376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.215015][ T9362] Process accounting resumed [ 880.242253][ T9342] Process accounting resumed [ 880.311758][ T9385] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 880.481138][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.507670][ T9391] lo speed is unknown, defaulting to 1000 [ 880.514055][ T9391] lo speed is unknown, defaulting to 1000 [ 880.574924][ T9398] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 880.660138][ T9401] netlink: 'syz.8.13895': attribute type 4 has an invalid length. [ 880.809691][ T9403] lo speed is unknown, defaulting to 1000 [ 880.816034][ T9403] lo speed is unknown, defaulting to 1000 [ 881.074808][ T9408] loop8: detected capacity change from 0 to 512 [ 881.081993][ T9408] EXT4-fs: Ignoring removed oldalloc option [ 881.135156][ T9408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.150630][ T9408] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 881.309855][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13901'. [ 881.328570][ T9421] serio: Serial port ttyS3 [ 881.495250][ T9427] lo speed is unknown, defaulting to 1000 [ 881.529033][ T9427] lo speed is unknown, defaulting to 1000 [ 881.807930][ T9435] ALSA: seq fatal error: cannot create timer (-19) [ 882.283825][ T9437] Process accounting resumed [ 882.521718][ T9454] netlink: 'syz.5.13909': attribute type 4 has an invalid length. [ 882.674673][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.706911][ T9458] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 882.869462][ T9464] lo speed is unknown, defaulting to 1000 [ 882.882797][ T9467] loop5: detected capacity change from 0 to 1024 [ 882.889935][ T9464] lo speed is unknown, defaulting to 1000 [ 882.897438][ T9460] lo speed is unknown, defaulting to 1000 [ 882.915847][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 882.915873][ T29] audit: type=1326 audit(1768347604.345:83443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 882.945803][ T9467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.004987][ T9460] lo speed is unknown, defaulting to 1000 [ 883.012250][ T9473] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 883.081402][ T29] audit: type=1326 audit(1768347604.375:83444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.105122][ T29] audit: type=1326 audit(1768347604.385:83445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.128799][ T29] audit: type=1326 audit(1768347604.385:83446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.152412][ T29] audit: type=1326 audit(1768347604.385:83447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.176085][ T29] audit: type=1326 audit(1768347604.385:83448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.189651][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.200156][ T29] audit: type=1326 audit(1768347604.385:83449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.232962][ T29] audit: type=1326 audit(1768347604.385:83450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.256698][ T29] audit: type=1326 audit(1768347604.385:83451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.289163][ T29] audit: type=1326 audit(1768347604.605:83452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.8.13912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 883.345746][ T9477] lo speed is unknown, defaulting to 1000 [ 883.352075][ T9477] lo speed is unknown, defaulting to 1000 [ 883.404871][ T9481] lo speed is unknown, defaulting to 1000 [ 883.423699][ T9481] lo speed is unknown, defaulting to 1000 [ 883.899197][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13919'. [ 883.983689][ T9492] lo speed is unknown, defaulting to 1000 [ 884.023969][ T9492] lo speed is unknown, defaulting to 1000 [ 884.323499][ T9498] loop8: detected capacity change from 0 to 512 [ 884.343193][ T9498] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.13921: casefold flag without casefold feature [ 884.370850][ T9498] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.13921: couldn't read orphan inode 15 (err -117) [ 884.386044][ T9498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.437931][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.571569][ T9507] 9p: Bad value for 'rfdno' [ 884.787917][ T9513] netlink: 'syz.5.13923': attribute type 4 has an invalid length. [ 884.910882][ T9494] Process accounting resumed [ 885.135129][ T9527] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 885.410700][ T9535] lo speed is unknown, defaulting to 1000 [ 885.417598][ T9535] lo speed is unknown, defaulting to 1000 [ 885.621820][ T9538] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 885.937239][ T9545] lo speed is unknown, defaulting to 1000 [ 885.943558][ T9545] lo speed is unknown, defaulting to 1000 [ 886.160183][ T9550] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 886.284624][ T9552] netlink: 'syz.3.13936': attribute type 4 has an invalid length. [ 886.395100][ T9563] lo speed is unknown, defaulting to 1000 [ 886.402357][ T9563] lo speed is unknown, defaulting to 1000 [ 886.626153][ T9565] netlink: 'syz.5.13942': attribute type 4 has an invalid length. [ 886.777580][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13943'. [ 887.630222][ T9598] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 887.667493][ T9594] lo speed is unknown, defaulting to 1000 [ 887.690820][ T9594] lo speed is unknown, defaulting to 1000 [ 887.858071][ T9605] lo speed is unknown, defaulting to 1000 [ 887.864205][ T9605] lo speed is unknown, defaulting to 1000 [ 887.945432][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 887.945448][ T29] audit: type=1326 audit(1768347609.365:83483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.7.13956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 888.026487][ T29] audit: type=1326 audit(1768347609.405:83484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.7.13956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 888.050459][ T29] audit: type=1326 audit(1768347609.405:83485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.7.13956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 888.074775][ T29] audit: type=1326 audit(1768347609.405:83486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.7.13956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 888.099357][ T29] audit: type=1326 audit(1768347609.405:83487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.7.13956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 888.372234][ T9627] netlink: 'syz.8.13959': attribute type 4 has an invalid length. [ 888.464106][ T9624] ALSA: seq fatal error: cannot create timer (-19) [ 888.814429][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13967'. [ 888.924320][ T9642] netlink: 'syz.7.13966': attribute type 4 has an invalid length. [ 889.847853][ T9694] Process accounting resumed [ 890.213117][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13992'. [ 890.248962][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13993'. [ 890.291530][ T9718] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 890.354240][T21517] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.367033][ T9719] geneve2: entered promiscuous mode [ 890.372307][ T9719] geneve2: entered allmulticast mode [ 890.401932][T21526] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.410883][T21526] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 890.442248][ T9718] lo speed is unknown, defaulting to 1000 [ 890.448570][ T9718] lo speed is unknown, defaulting to 1000 [ 890.495992][T21526] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.504924][T21526] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 890.559132][ T9723] serio: Serial port ttyS3 [ 890.592890][T21526] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.601790][T21526] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 890.623794][ T9727] netlink: 'syz.7.13996': attribute type 4 has an invalid length. [ 890.652967][T21526] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 890.748711][ T9729] serio: Serial port ttyS3 [ 890.926096][ T9742] loop5: detected capacity change from 0 to 1024 [ 890.943292][ T9742] EXT4-fs: inline encryption not supported [ 890.949205][ T9742] EXT4-fs: Ignoring removed orlov option [ 890.969034][ T9742] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 890.985627][ T9742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 890.994069][ T9742] System zones: 0-1, 3-12 [ 890.999353][ T9742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.013012][ T29] audit: type=1326 audit(1768347612.445:83488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 891.037359][ T29] audit: type=1326 audit(1768347612.465:83489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 891.061111][ T29] audit: type=1326 audit(1768347612.465:83490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 891.084819][ T29] audit: type=1326 audit(1768347612.465:83491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.14002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e89a2f749 code=0x7ffc0000 [ 891.164711][ T6613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.186806][ T9753] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 891.243267][ T29] audit: type=1326 audit(1768347612.655:83492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.3.14008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a0c6f749 code=0x7ffc0000 [ 891.291277][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14010'. [ 891.300621][ T9762] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 891.333459][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14010'. [ 891.339968][ T9753] lo speed is unknown, defaulting to 1000 [ 891.349043][ T9753] lo speed is unknown, defaulting to 1000 [ 891.377134][ T9764] loop5: detected capacity change from 0 to 512 [ 891.385973][ T9764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 891.399435][ T9764] EXT4-fs (loop5): 1 truncate cleaned up [ 891.405952][ T9764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.455014][ T6613] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 891.483940][ T6613] EXT4-fs error (device loop5): __ext4_iget:5426: inode #12: block 2: comm syz-executor: invalid block [ 891.502384][ T9774] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 891.531425][ T6613] EXT4-fs error (device loop5): __ext4_iget:5426: inode #12: block 2: comm syz-executor: invalid block [ 891.621147][ T9769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.758186][ T9785] lo speed is unknown, defaulting to 1000 [ 891.765394][ T9785] lo speed is unknown, defaulting to 1000 [ 892.423113][ T9793] loop8: detected capacity change from 0 to 1024 [ 892.455175][ T9793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.486455][T21485] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.525492][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.552274][T21485] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.566582][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14023'. [ 892.586672][ T9802] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 892.616091][T21485] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.623645][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14023'. [ 892.676579][T21485] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.695511][ T9812] netlink: 'syz.7.14025': attribute type 29 has an invalid length. [ 892.710957][ T9812] netlink: 'syz.7.14025': attribute type 29 has an invalid length. [ 892.729660][ T9812] netlink: 500 bytes leftover after parsing attributes in process `syz.7.14025'. [ 892.740996][ T9812] unsupported nla_type 58 [ 892.790442][ T9798] lo speed is unknown, defaulting to 1000 [ 892.797604][T21485] bridge_slave_1: left allmulticast mode [ 892.803428][T21485] bridge_slave_1: left promiscuous mode [ 892.809388][T21485] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.853196][T21485] bridge_slave_0: left allmulticast mode [ 892.859444][T21485] bridge_slave_0: left promiscuous mode [ 892.865383][T21485] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.008027][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 893.008044][ T29] audit: type=1400 audit(1768347614.435:83521): avc: denied { relabelfrom } for pid=9838 comm="syz.8.14035" name="" dev="pipefs" ino=174034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 893.020642][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14036'. [ 893.039985][ T9839] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 893.082945][ T29] audit: type=1400 audit(1768347614.485:83522): avc: denied { relabelto } for pid=9838 comm="syz.8.14035" name="" dev="pipefs" ino=174034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 893.088155][ T9841] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 893.135661][T21485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.165485][T21485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.183374][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14036'. [ 893.189404][T21485] bond0 (unregistering): Released all slaves [ 893.200843][ T9798] lo speed is unknown, defaulting to 1000 [ 893.240097][T21485] tipc: Left network mode [ 893.356080][T21485] hsr_slave_0: left promiscuous mode [ 893.364843][T21485] hsr_slave_1: left promiscuous mode [ 893.370761][T21485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.378358][T21485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.386734][T21485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.394204][T21485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.412254][T21485] veth1_macvtap: left promiscuous mode [ 893.417882][T21485] veth0_macvtap: left promiscuous mode [ 893.432909][T21485] veth1_vlan: left promiscuous mode [ 893.443558][T21485] veth0_vlan: left promiscuous mode [ 893.533921][T21485] pim6reg (unregistering): left allmulticast mode [ 893.653900][T21485] team0 (unregistering): Port device team_slave_1 removed [ 893.664343][ T9863] netlink: 'syz.8.14043': attribute type 4 has an invalid length. [ 893.676881][T21485] team0 (unregistering): Port device team_slave_0 removed [ 893.796792][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14047'. [ 893.851362][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14048'. [ 893.879283][ T9880] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 893.888586][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14049'. [ 893.922103][ T9798] chnl_net:caif_netlink_parms(): no params data found [ 893.940047][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14048'. [ 894.005794][ T9896] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 894.020429][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.027730][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.035139][ T9798] bridge_slave_0: entered allmulticast mode [ 894.041585][ T9798] bridge_slave_0: entered promiscuous mode [ 894.048753][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.056126][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.063397][ T9798] bridge_slave_1: entered allmulticast mode [ 894.071534][ T9798] bridge_slave_1: entered promiscuous mode [ 894.104277][ T9798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.113762][ T9898] lo speed is unknown, defaulting to 1000 [ 894.120349][ T9898] lo speed is unknown, defaulting to 1000 [ 894.131541][ T9900] loop8: detected capacity change from 0 to 512 [ 894.154671][ T9798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.184185][ T9900] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 894.207533][ T9900] EXT4-fs (loop8): 1 truncate cleaned up [ 894.213944][ T9900] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.227803][ T9798] team0: Port device team_slave_0 added [ 894.237715][ T9798] team0: Port device team_slave_1 added [ 894.251616][ T9857] Process accounting resumed [ 894.285345][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.292739][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.319688][ T9798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.363667][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14053'. [ 894.383814][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.392426][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.418702][ T9798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.498879][ T9798] hsr_slave_0: entered promiscuous mode [ 894.511673][ T9798] hsr_slave_1: entered promiscuous mode [ 894.663496][ T9798] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 894.673244][ T9798] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 894.682701][ T9798] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 894.696208][ T9798] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 894.724939][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.732086][ T9798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.739508][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.746887][ T9798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.793826][ T9798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.808534][T21485] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.817622][T21485] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.831167][ T9798] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.849951][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.860783][T21485] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.868093][T21485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.897834][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.906068][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.919603][ T9897] Process accounting resumed [ 894.985350][ T9926] netlink: 'syz.8.14056': attribute type 4 has an invalid length. [ 895.063646][ T9936] netlink: 'syz.1.14057': attribute type 4 has an invalid length. [ 895.115960][ T9939] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 895.237032][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.361254][ T9943] lo speed is unknown, defaulting to 1000 [ 895.367978][ T9943] lo speed is unknown, defaulting to 1000 [ 895.805813][ T9952] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 895.837294][ T9954] netlink: 'syz.8.14060': attribute type 4 has an invalid length. [ 896.004641][ T9798] veth0_vlan: entered promiscuous mode [ 896.014515][ T9798] veth1_vlan: entered promiscuous mode [ 896.066874][ T9798] veth0_macvtap: entered promiscuous mode [ 896.076471][ T9798] veth1_macvtap: entered promiscuous mode [ 896.082961][ T29] audit: type=1326 audit(1768347617.505:83523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.8.14067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 896.095148][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.107177][ T29] audit: type=1326 audit(1768347617.505:83524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.8.14067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 896.166059][ T9975] loop8: detected capacity change from 0 to 1024 [ 896.175007][ T29] audit: type=1326 audit(1768347617.565:83525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.8.14067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f541697f749 code=0x7ffc0000 [ 896.185964][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.199940][ T29] audit: type=1326 audit(1768347617.565:83526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.8.14067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f541697f783 code=0x7ffc0000 [ 896.230659][ T29] audit: type=1326 audit(1768347617.565:83527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.8.14067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f541697e1ff code=0x7ffc0000 [ 896.254227][ T29] audit: type=1326 audit(1768347617.595:83528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.8.14067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f541697f7d7 code=0x7ffc0000 [ 896.278012][ T29] audit: type=1326 audit(1768347617.595:83529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.8.14067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f541697df90 code=0x7ffc0000 [ 896.281970][T21485] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.302529][ T29] audit: type=1326 audit(1768347617.595:83530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.8.14067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f541697f34b code=0x7ffc0000 [ 896.366616][ T9975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.402950][T21485] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.421997][T21485] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.442175][T21485] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.461366][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.496044][ T9985] serio: Serial port ttyS3 [ 896.564816][ T9991] netlink: 'syz.8.14069': attribute type 4 has an invalid length. [ 896.694986][ T9993] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 896.795771][ T9961] Process accounting resumed [ 896.851476][T10004] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 897.044075][T10015] netlink: 'syz.3.14076': attribute type 4 has an invalid length. [ 897.095047][T10016] lo speed is unknown, defaulting to 1000 [ 897.101420][T10016] lo speed is unknown, defaulting to 1000 [ 897.756490][T10033] __nla_validate_parse: 6 callbacks suppressed [ 897.756508][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14083'. [ 897.815011][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14083'. [ 897.824307][T10033] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 898.051533][T10056] lo speed is unknown, defaulting to 1000 [ 898.060135][T10056] lo speed is unknown, defaulting to 1000 [ 898.094487][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 898.094505][ T29] audit: type=1326 audit(1768347619.525:83572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.161738][ T29] audit: type=1326 audit(1768347619.555:83573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.189104][ T29] audit: type=1326 audit(1768347619.565:83574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.214017][ T29] audit: type=1326 audit(1768347619.565:83575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.240962][ T29] audit: type=1326 audit(1768347619.565:83576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.266328][ T29] audit: type=1326 audit(1768347619.565:83577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.292322][ T29] audit: type=1326 audit(1768347619.565:83578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.318526][ T29] audit: type=1326 audit(1768347619.565:83579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.343174][ T29] audit: type=1326 audit(1768347619.565:83580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.369077][ T29] audit: type=1326 audit(1768347619.565:83581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.7.14092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc57f45f749 code=0x7ffc0000 [ 898.567585][T10063] bridge0: port 3(batadv1) entered blocking state [ 898.575068][T10063] bridge0: port 3(batadv1) entered disabled state [ 898.582290][T10063] batadv1: entered allmulticast mode [ 898.604229][T10063] batadv1: entered promiscuous mode [ 898.628659][T10039] Process accounting resumed [ 898.704860][T10063] pim6reg: left allmulticast mode [ 898.841328][T10074] netlink: 'syz.7.14098': attribute type 29 has an invalid length. [ 898.872960][T10074] netlink: 'syz.7.14098': attribute type 29 has an invalid length. [ 898.905209][T10074] netlink: 500 bytes leftover after parsing attributes in process `syz.7.14098'. [ 898.925028][T10080] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 898.931714][T10080] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 898.939557][T10080] vhci_hcd vhci_hcd.0: Device attached [ 898.968614][T10081] vhci_hcd: connection closed [ 898.968800][T21517] vhci_hcd vhci_hcd.8: stop threads [ 898.979572][T21517] vhci_hcd vhci_hcd.8: release socket [ 898.985533][T21517] vhci_hcd vhci_hcd.8: disconnect device [ 899.083302][T21526] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 899.092624][T21526] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 899.240860][T10098] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 899.480907][T10103] lo speed is unknown, defaulting to 1000 [ 899.488562][T10103] lo speed is unknown, defaulting to 1000 [ 899.899179][T10109] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 900.020374][T10094] Process accounting resumed [ 900.185956][T10125] netlink: 'syz.3.14113': attribute type 4 has an invalid length. [ 900.369701][T10138] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 900.584217][T10142] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 900.745579][T10143] lo speed is unknown, defaulting to 1000 [ 900.753335][T10143] lo speed is unknown, defaulting to 1000 [ 900.886425][T10144] lo speed is unknown, defaulting to 1000 [ 900.894591][T10144] lo speed is unknown, defaulting to 1000 [ 901.436585][T10149] xt_hashlimit: invalid rate [ 901.481717][T10152] netlink: 'syz.8.14121': attribute type 4 has an invalid length. [ 901.484590][T10149] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14120'. [ 901.563950][T10149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14120'. [ 901.676276][T10179] netlink: 'syz.3.14128': attribute type 4 has an invalid length. [ 902.216020][T10217] netlink: 'syz.9.14140': attribute type 4 has an invalid length. [ 902.297488][T10219] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14142'. [ 902.306898][T10219] netlink: 'syz.7.14142': attribute type 7 has an invalid length. [ 902.314849][T10219] netlink: 'syz.7.14142': attribute type 8 has an invalid length. [ 902.322919][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14142'. [ 902.410953][T10223] netlink: 'syz.3.14143': attribute type 4 has an invalid length. [ 902.640354][T10282] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 902.772570][T10286] serio: Serial port ttyS3 [ 902.891362][T10288] lo speed is unknown, defaulting to 1000 [ 902.898025][T10288] lo speed is unknown, defaulting to 1000 [ 903.683868][T10316] netlink: 'syz.8.14156': attribute type 4 has an invalid length. [ 903.888418][T10321] loop8: detected capacity change from 0 to 512 [ 903.895579][T10321] EXT4-fs: Ignoring removed oldalloc option [ 903.922916][T10321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.943103][T10321] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 904.101248][T10335] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 904.133419][T10337] loop9: detected capacity change from 0 to 512 [ 904.260524][T10340] lo speed is unknown, defaulting to 1000 [ 904.282507][T10340] lo speed is unknown, defaulting to 1000 [ 904.504447][T10337] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 904.518623][T10315] Process accounting resumed [ 904.616318][T10326] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 904.645098][T10326] EXT4-fs (loop8): Remounting filesystem read-only [ 904.703788][T10344] lo speed is unknown, defaulting to 1000 [ 904.710155][T10344] lo speed is unknown, defaulting to 1000 [ 904.716505][ T9798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.735027][T10346] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 904.932918][T10352] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 905.088774][T10354] lo speed is unknown, defaulting to 1000 [ 905.095326][T10354] lo speed is unknown, defaulting to 1000 [ 905.431928][ T3044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.743116][T10371] netlink: 'syz.8.14168': attribute type 4 has an invalid length. [ 905.797967][T10370] lo speed is unknown, defaulting to 1000 [ 905.804954][T10369] netlink: 'syz.3.14172': attribute type 29 has an invalid length. [ 905.823470][T10374] loop9: detected capacity change from 0 to 512 [ 905.833236][T10370] lo speed is unknown, defaulting to 1000 [ 905.847417][T10369] netlink: 'syz.3.14172': attribute type 29 has an invalid length. [ 905.848956][T10374] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 905.890563][T10369] netlink: 500 bytes leftover after parsing attributes in process `syz.3.14172'. [ 905.934218][T10374] EXT4-fs (loop9): 1 truncate cleaned up [ 905.953324][T10374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.735914][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 906.735930][ T29] audit: type=1326 audit(1768347628.165:83597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.1.14180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 906.767512][ T29] audit: type=1326 audit(1768347628.165:83598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.1.14180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 906.791434][ T29] audit: type=1326 audit(1768347628.165:83599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.1.14180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ef5f749 code=0x7ffc0000 [ 906.925539][T10397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14178'. [ 906.986895][ T9798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.019291][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14186'. [ 907.028578][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14185'. [ 907.037772][T10408] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 907.037870][T10410] ================================================================== [ 907.037954][T10410] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 907.060556][T10410] [ 907.062934][T10410] write to 0xffffffff868d4118 of 88 bytes by task 10408 on cpu 1: [ 907.070854][T10410] prb_reserve+0x6e6/0xad0 [ 907.075408][T10410] vprintk_store+0x53c/0x830 [ 907.080052][T10410] vprintk_emit+0x15a/0x5c0 [ 907.084600][T10410] vprintk_default+0x26/0x30 [ 907.089238][T10410] vprintk+0x1d/0x30 [ 907.093174][T10410] _printk+0x79/0xa0 [ 907.097114][T10410] __parse_flow_nlattrs+0x44b/0x450 [ 907.102357][T10410] ovs_nla_get_match+0x7d/0xe40 [ 907.107249][T10410] ovs_flow_cmd_new+0x1bc/0x790 [ 907.112142][T10410] genl_family_rcv_msg_doit+0x143/0x1b0 [ 907.117721][T10410] genl_rcv_msg+0x422/0x460 [ 907.122249][T10410] netlink_rcv_skb+0x123/0x220 [ 907.127144][T10410] genl_rcv+0x28/0x40 [ 907.131235][T10410] netlink_unicast+0x5c0/0x690 [ 907.136113][T10410] netlink_sendmsg+0x58b/0x6b0 [ 907.141380][T10410] __sock_sendmsg+0x145/0x180 [ 907.146096][T10410] ____sys_sendmsg+0x31e/0x4a0 [ 907.150899][T10410] ___sys_sendmsg+0x17b/0x1d0 [ 907.155610][T10410] __x64_sys_sendmsg+0xd4/0x160 [ 907.160520][T10410] x64_sys_call+0x17ba/0x3000 [ 907.165229][T10410] do_syscall_64+0xca/0x2b0 [ 907.169808][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.175738][T10410] [ 907.178087][T10410] read to 0xffffffff868d4118 of 8 bytes by task 10410 on cpu 0: [ 907.185756][T10410] _prb_read_valid+0x383/0x920 [ 907.190649][T10410] prb_read_valid+0x3c/0x60 [ 907.195270][T10410] console_unlock+0x13c/0x270 [ 907.199994][T10410] vprintk_emit+0x39f/0x5c0 [ 907.204549][T10410] vprintk_default+0x26/0x30 [ 907.209189][T10410] vprintk+0x1d/0x30 [ 907.213114][T10410] _printk+0x79/0xa0 [ 907.217059][T10410] __nla_validate_parse+0x1738/0x1d00 [ 907.222488][T10410] __nla_parse+0x40/0x60 [ 907.226777][T10410] genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 907.232963][T10410] genl_family_rcv_msg_doit+0x48/0x1b0 [ 907.238447][T10410] genl_rcv_msg+0x422/0x460 [ 907.243050][T10410] netlink_rcv_skb+0x123/0x220 [ 907.247868][T10410] genl_rcv+0x28/0x40 [ 907.252354][T10410] netlink_unicast+0x5c0/0x690 [ 907.257154][T10410] netlink_sendmsg+0x58b/0x6b0 [ 907.261954][T10410] __sock_sendmsg+0x145/0x180 [ 907.266678][T10410] ____sys_sendmsg+0x31e/0x4a0 [ 907.271474][T10410] ___sys_sendmsg+0x17b/0x1d0 [ 907.276367][T10410] __x64_sys_sendmsg+0xd4/0x160 [ 907.281263][T10410] x64_sys_call+0x17ba/0x3000 [ 907.285971][T10410] do_syscall_64+0xca/0x2b0 [ 907.290516][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.296431][T10410] [ 907.298862][T10410] value changed: 0x0000000000002ae3 -> 0x0000000000004ae3 [ 907.305989][T10410] [ 907.308423][T10410] Reported by Kernel Concurrency Sanitizer on: [ 907.314676][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.9.14185 Not tainted syzkaller #0 PREEMPT(voluntary) [ 907.324687][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 907.334898][T10410] ================================================================== [ 907.346049][ T29] audit: type=1400 audit(1768347628.775:83600): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[610]" dev="pipefs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 907.379319][T10410] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 907.422447][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14186'. [ 907.442719][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14185'. [ 907.687413][T10271] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.775774][T10271] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.836277][T10271] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.897295][T10271] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.951526][T10271] bridge_slave_1: left allmulticast mode [ 907.957854][T10271] bridge_slave_1: left promiscuous mode [ 907.966152][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.976029][T10271] bridge_slave_0: left allmulticast mode [ 907.983644][T10271] bridge_slave_0: left promiscuous mode [ 907.990978][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.076230][T10271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.088342][T10271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.100420][T10271] bond0 (unregistering): Released all slaves [ 908.144216][T10271] hsr_slave_0: left promiscuous mode [ 908.149890][T10271] hsr_slave_1: left promiscuous mode [ 908.156348][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.164619][T10271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.173463][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.181088][T10271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.191949][T10271] veth1_macvtap: left promiscuous mode [ 908.197587][T10271] veth0_macvtap: left promiscuous mode [ 908.204066][T10271] veth1_vlan: left promiscuous mode [ 908.209379][T10271] veth0_vlan: left promiscuous mode [ 908.279683][T10271] team0 (unregistering): Port device team_slave_1 removed [ 908.289692][T10271] team0 (unregistering): Port device team_slave_0 removed [ 908.591732][T10271] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.605192][T10271] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.656097][T10271] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.673984][T10271] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.725680][T10271] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.738218][T10271] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.776890][T10271] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.790768][T10271] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.881067][T10271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.916472][T10271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.956205][T10271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.995955][T10271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.059911][T10271] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.072138][T10271] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.085817][T10271] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 909.126033][T10271] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.141524][T10271] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.155166][T10271] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 909.225886][T10271] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.236411][T10271] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.247002][T10271] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 909.295963][T10271] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.307371][T10271] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.317950][T10271] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 909.370732][T10271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.425793][T10271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.466680][T10271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.535699][T10271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.588032][T10271] bridge_slave_1: left allmulticast mode [ 909.593886][T10271] bridge_slave_1: left promiscuous mode [ 909.599630][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.607805][T10271] bridge_slave_0: left allmulticast mode [ 909.613549][T10271] bridge_slave_0: left promiscuous mode [ 909.619216][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.628998][T10271] bridge_slave_1: left allmulticast mode [ 909.634940][T10271] bridge_slave_1: left promiscuous mode [ 909.640917][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.648829][T10271] bridge_slave_0: left allmulticast mode [ 909.654534][T10271] bridge_slave_0: left promiscuous mode [ 909.660220][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.668870][T10271] batadv1: left allmulticast mode [ 909.674038][T10271] batadv1: left promiscuous mode [ 909.679276][T10271] bridge0: port 3(batadv1) entered disabled state [ 909.686684][T10271] bridge_slave_1: left allmulticast mode [ 909.692427][T10271] bridge_slave_1: left promiscuous mode [ 909.698241][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.706331][T10271] bridge_slave_0: left allmulticast mode [ 909.712151][T10271] bridge_slave_0: left promiscuous mode [ 909.718633][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.730004][T10271] bridge_slave_1: left allmulticast mode [ 909.735766][T10271] bridge_slave_1: left promiscuous mode [ 909.741444][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.749672][T10271] bridge_slave_0: left allmulticast mode [ 909.755443][T10271] bridge_slave_0: left promiscuous mode [ 909.761485][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.905331][T10271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.915582][T10271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.925183][T10271] bond0 (unregistering): Released all slaves [ 909.967442][T10271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.977921][T10271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.987812][T10271] bond0 (unregistering): Released all slaves [ 910.095502][T10271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.105680][T10271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.115360][T10271] bond0 (unregistering): Released all slaves [ 910.156399][T10271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.166670][T10271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.178620][T10271] bond0 (unregistering): Released all slaves [ 910.218201][T10271] tipc: Left network mode [ 910.222898][T10271] tipc: Left network mode [ 910.227459][T10271] tipc: Left network mode [ 910.232020][T10271] tipc: Left network mode [ 910.306377][T10271] hsr_slave_0: left promiscuous mode [ 910.312252][T10271] hsr_slave_1: left promiscuous mode [ 910.320237][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.327795][T10271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.335672][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.343400][T10271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.353121][T10271] hsr_slave_0: left promiscuous mode [ 910.359572][T10271] hsr_slave_1: left promiscuous mode [ 910.366807][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.374245][T10271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.382199][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.390049][T10271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.399868][T10271] hsr_slave_0: left promiscuous mode [ 910.406386][T10271] hsr_slave_1: left promiscuous mode [ 910.412522][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.420244][T10271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.428476][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.436279][T10271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.446378][T10271] hsr_slave_0: left promiscuous mode [ 910.453153][T10271] hsr_slave_1: left promiscuous mode [ 910.459439][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.467522][T10271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.475819][T10271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.483309][T10271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.502921][T10271] veth1_macvtap: left promiscuous mode [ 910.508977][T10271] veth0_macvtap: left promiscuous mode [ 910.515754][T10271] veth1_vlan: left promiscuous mode [ 910.521147][T10271] veth0_vlan: left promiscuous mode [ 910.527419][T10271] veth1_macvtap: left promiscuous mode [ 910.534258][T10271] veth0_macvtap: left promiscuous mode [ 910.540328][T10271] veth1_vlan: left promiscuous mode [ 910.545974][T10271] veth0_vlan: left promiscuous mode [ 910.551934][T10271] veth1_macvtap: left promiscuous mode [ 910.557748][T10271] veth0_macvtap: left promiscuous mode [ 910.563527][T10271] veth1_vlan: left promiscuous mode [ 910.568903][T10271] veth0_vlan: left promiscuous mode [ 910.575073][T10271] veth1_macvtap: left promiscuous mode [ 910.580620][T10271] veth0_macvtap: left promiscuous mode [ 910.586323][T10271] veth1_vlan: left promiscuous mode [ 910.591541][T10271] veth0_vlan: left promiscuous mode [ 910.729701][T10271] pim6reg (unregistering): left allmulticast mode [ 910.763517][T10271] team0 (unregistering): Port device team_slave_1 removed [ 910.774327][T10271] team0 (unregistering): Port device team_slave_0 removed [ 910.802962][T10271] team0 (unregistering): Port device dummy0 removed [ 910.815962][T10271] pim6reg (unregistering): left allmulticast mode [ 910.851469][T10271] team0 (unregistering): Port device team_slave_1 removed [ 910.862974][T10271] team0 (unregistering): Port device team_slave_0 removed [ 910.925446][T10271] team0 (unregistering): Port device team_slave_1 removed [ 910.937406][T10271] team0 (unregistering): Port device team_slave_0 removed [ 910.969020][T10271] pim6reg (unregistering): left allmulticast mode [ 911.004488][T10271] team0 (unregistering): Port device team_slave_1 removed [ 911.016101][T10271] team0 (unregistering): Port device team_slave_0 removed [ 911.048244][T21526] smc: removing ib device sz1