last executing test programs: 6.943121168s ago: executing program 3 (id=1715): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200000, &(0x7f0000000500), 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', 0x0) signalfd(r0, &(0x7f0000000000)={[0xffffffffffffa896]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r4, 0x1) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='io_uring_submit_sqe\x00', r3}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x7ff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', 0x0) 6.038825619s ago: executing program 3 (id=1720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRES8=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r2, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) mq_open(0x0, 0x9316e6fb81c276de, 0xf4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x10000}}, {@errors_remount}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47a, &(0x7f0000000200)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_ringparam={0x11, 0x80000001, 0x7, 0x3, 0x8001, 0x5, 0x7, 0x0, 0xe00000}}) fchdir(r6) close(r6) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 5.742193332s ago: executing program 3 (id=1722): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x20000ffffffff}, 0x18) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_migrate_pages\x00', r3, 0x0, 0x7}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Ux\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xb9\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x7) dup(r5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) clock_adjtime(0x2, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xcb, 0x0, 0x7, 0x4, 0x200000000000004, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x401, 0x1000, 0x837b, 0x7, 0x80000000000003, 0x4, 0x3}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x800005}, 0x18) 4.091618681s ago: executing program 2 (id=1737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x77359400}, 0xfffffffffffffffe) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c850000004300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 3.984601899s ago: executing program 0 (id=1738): syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r4, &(0x7f0000000000), 0x0, 0x5, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000140)='./file0\x00', 0xa4000021) close(r6) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r4, &(0x7f0000000000), 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x8, 0xb25, {{0x43, 0x4, 0x3, 0x4, 0x10c, 0x66, 0x0, 0x9f, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x7f, [@multicast2, @rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0x5, [0x96, 0x2, 0x7, 0x8]}, @timestamp={0x44, 0x28, 0x96, 0x0, 0x7, [0x1, 0x8, 0x80, 0x0, 0x200, 0xf9, 0x3307941b, 0x8, 0x9]}, @ssrr={0x89, 0x23, 0x60, [@empty, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x9, [{@broadcast, 0x10000000}, {@multicast2}, {@private=0xa010100, 0x7f}]}, @rr={0x7, 0x2b, 0x42, [@private=0xa010102, @multicast2, @broadcast, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0x30, [@dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}]}, @rr={0x7, 0xf, 0x15, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x2, 0x2, {{0x13, 0x4, 0x3, 0x2, 0x4c, 0x64, 0x0, 0xf7, 0x2f, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x2d, 0x1, [{0x0, 0xf, "cb70ffd2968483669e35dd0a0b"}, {0x7, 0x9, "3fcb9728f9464f"}, {0x2, 0x2}, {0x0, 0x9, "faf10ad62b373c"}, {0x5, 0x4, "efac"}]}, @generic={0x94, 0x7, "e9a4e23099"}, @end]}}}}}) getpeername$packet(r5, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r7) 3.362382938s ago: executing program 1 (id=1739): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c00018008001b000000000020000a80050008"], 0x98}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000007500000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001802c00018010000100fc02000000000000000000000000000014000400fc010000000000000000000000000000f6030280050001003a0000000c001980080001"], 0x5c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x1, 0x1, 0x401, 0x0, 0x7ffffffb}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 3.362014558s ago: executing program 4 (id=1740): pipe2(&(0x7f0000000240), 0x4000) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x65ccc849c3af9fb9) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f15f9ef2f5c3816600095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t s:stem_u:object_r:fixed_disk_device_t:s0 00000000000'], 0x79) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x50214, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1e08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56641, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.295891963s ago: executing program 2 (id=1741): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) readahead(0xffffffffffffffff, 0x6, 0x100) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@nolazytime}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000880)='afs_cm_no_server_u\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xf, 0x12c, &(0x7f00000000c0)="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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911052000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="a07f8fe23f5ca8d926e5a3a220b873202f2997e4aac3db", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.991578996s ago: executing program 2 (id=1742): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850002000000000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, @ethernet={0x6, @local}, @sco, @isdn={0x22, 0xf9, 0x14, 0x2, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)='pimreg\x00', 0xc8ca, 0x6, 0xb532}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r3 = socket(0x10, 0x4, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) lseek(0xffffffffffffffff, 0x55, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xcca}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x20300, 0x0) readv(r8, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/206, 0xce}], 0x1) 2.5563038s ago: executing program 4 (id=1743): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 2.544175101s ago: executing program 4 (id=1744): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000008, 0xc94ee3b6e518beb0, 0xffffffffffffffff, 0x10000000) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="c200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2510"], 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) 2.493980425s ago: executing program 1 (id=1745): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0x0, r1, &(0x7f0000000680)='./file2\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000020b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x19, &(0x7f0000000340)=""/216, 0x0, 0x1e}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYRESOCT, @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000500)={0x2e, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x3ff}, @enc_lim={0x4, 0x1, 0x9}, @generic={0xff, 0xac, "c2def405d0dbd94bbfa9085343d8aa5eaa09421a7d83ea8156b752a750223d2bca96f7f71e613777abe3c7944b93da04347ff63ec71b10ef9013a1503279a57d250cf14a56548683b95d309d5fc78f6bc6954b7b0f1b8523b533b39484e597b4c614eb2681cfddda2e60d8099ee2f311fe43b020d52ccffafde02f2b262ae5a8e451a484cee2c150114a14dc818ce67418853e6f38df3af211eb67ece08260ea6e65bbfdf25b9f505871d24f"}, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x9, [0x7, 0x3, 0x5, 0x2]}}]}, 0x100) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 2.275447323s ago: executing program 0 (id=1746): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf25818080000000000000000c0014000100fc00000000000000000000000000000114"], 0x44}}, 0x884) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r7) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, r12, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8b66}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}]}, 0xec}, 0x1, 0x0, 0x0, 0x20040001}, 0x80) 1.728807655s ago: executing program 4 (id=1747): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000040a046f75162b0d39500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="c1dfb061cd21d3084d94d3540800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x4, 0x7fff, 0x7, 0x6, 0x40, 0x77}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000001c0)={0xdc, 0x10, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9f8030768045c8c989a14f088a8", 0x0, 0x809e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) timerfd_create(0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x18) r8 = memfd_create(&(0x7f0000000600)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc', 0xe) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000240)={0x3c, 0x3, 0x9}, 0x10) fchmod(r8, 0x6) 1.725685825s ago: executing program 2 (id=1757): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0x8}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x1}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xba, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000040000000400000001000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="19"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mq_open(&(0x7f0000000380)='!\x7f\x00\xca\x00\x00\x00\f\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB, @ANYRES32=r6], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) creat(&(0x7f0000000240)='./bus\x00', 0xbb) timer_settime(0x0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7fff, 0x420, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 1.621828143s ago: executing program 1 (id=1749): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_open_dev$usbfs(0x0, 0xb, 0x3196c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000240)) semget$private(0x0, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0}]) write(r3, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000300)={0x84, @multicast2, 0x4e21, 0x0, 'lblc\x00', 0x34, 0xda, 0x20}, 0x2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.621437083s ago: executing program 3 (id=1750): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000100010008", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ab7394a6f643a66db2ea50a800000000000000000000000000000000c899eb125101ba03a6a825dd23c6b447a3d4d513e2daf2495ecda6ead8ea0796420a9608a78897f80557d4d5971f7026dd22e3487bdb198514d7968d4006c7aeb2a51a01a53afe8337"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sysinfo(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.431097558s ago: executing program 0 (id=1751): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f0000002500)=""/4098, 0x41000}, 0x94) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='writeback_bdi_register\x00', r1, 0x0, 0x3}, 0x18) mknodat(0xffffffffffffffff, 0x0, 0x20, 0x10008) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xa) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.427198289s ago: executing program 4 (id=1752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x77359400}, 0xfffffffffffffffe) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c850000004300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1.339645926s ago: executing program 2 (id=1753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket(0x848000000015, 0x805, 0x0) recvfrom$inet(r1, &(0x7f0000000400)=""/164, 0xa4, 0x40000000, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010102}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private2, 0x3ff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x240c0000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r8}, &(0x7f0000000000), &(0x7f0000000200)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.113504923s ago: executing program 1 (id=1754): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) 1.069769977s ago: executing program 1 (id=1755): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'pim6reg0\x00', @broadcast}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)="27050200590214000600002fb96da7f706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184bbfdb9dd6f635406c4a67c5ff905a80e8404bb39fa4647893c17de955e6c8e765fa111bab1b33a1571772290d038d6cdfe81208da10a97337ccacb53d20e2311bbcc6f8e4d2a5f8256cb8584db15a24067e11e1462505442d912f40e409000000f8dd2eb87781e0802b62ce525aaa91b19a8296d13e2f0b6ef45c8e76a8e12bb7b77f5b882f41a1abc6839ba447dee5704f6c7e", 0xc8}, {&(0x7f00000006c0)="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", 0x1b8}], 0x2}, 0x9cdc2384056b48b8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000700), &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="36abf5eb0d32", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5, 0x0, 0x8000000}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000a40000005000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x48) 763.61354ms ago: executing program 3 (id=1756): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c00018008001b000000000020000a80050008"], 0x98}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000007500000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001802c00018010000100fc02000000000000000000000000000014000400fc010000000000000000000000000000f6030280050001003a0000000c001980080001"], 0x5c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x1, 0x1, 0x401, 0x0, 0x7ffffffb}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 635.35647ms ago: executing program 0 (id=1758): socket$netlink(0x10, 0x3, 0x0) socketpair(0x0, 0xc4aff2106dfeb1e, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) open(0x0, 0x40000, 0x194) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x439, &(0x7f0000000580)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x41, 0x193) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000001c0)=ANY=[]) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x1, 0x3, 0x4}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) 622.570582ms ago: executing program 4 (id=1759): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r5, &(0x7f00000006c0)="66bb0b760dc0f4ff2d", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x1, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) setns(r4, 0x24020000) 556.326927ms ago: executing program 2 (id=1760): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0579794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000800)='./file2\x00', 0x125042, 0x144) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x17c}}, 0x40020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001980)}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000800)="696b487a92e473bb265f9a7a", 0xc}], 0x1}}], 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 191.572845ms ago: executing program 0 (id=1761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x4}}, 0x10) close(r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") 182.179066ms ago: executing program 1 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x10, 0x110, 0x2}}], 0x10}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x800, 0x8000, 0x400252}, &(0x7f0000000640), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x42, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0xc18c04, &(0x7f00000003c0), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x220000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x13) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=1763): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000fc0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x80000000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@dax}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}], [{@obj_type={'obj_type', 0x3d, '/('}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x95b13d39eae26fda, &(0x7f0000001200)=ANY=[@ANYBLOB="733d643e7b1da7ea973a2bc2f4282cbbc5605ce12ae1e70c6e452c18d652b3eb253433604d99658f210a8855102e586237e9a96d759a0a606851d4af5a69d8261d9b512dc3f385c6fdd8b31e2da2b7b41b97db67d2f04a2798e9c7b737220bcb601ad903ada8999f472aa852f5cecda09325db6653f800738d3965253f878a50f280c976d3823fa058f7610c64267cf40ed44599b85f4ac8159e5b298225f9c6bb839f73e10d1808618f5f1504985ca797dd36814b3e4cb3e0c606000000009ac9af3af7f7a8dd0845f82f5b994dae6609c0dfca8589c6158175087c1590203094f34961c879c2ad463553e408e5e9f7e8fae9ddb8f25fa68a9381ef3c7282df11c5f1c186bcd192d1e80ab55169c90c4a37b8976d542065a9cea8b6e301b6bcc1cacc75406e54328cf09ae8573c99dc273fa604531664816ee222c7c73308f32c85ef578005ca42585ead98781725ad64e15d95d612a0eb098cf27b173d19e221b2c9dd3066e193866c7c2fc574f036a40f1bddecc57f24a64834d118b17be281c41caba7", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff000000000000f800530000000000000076113fb187fd4f3ad01ac7785f48540000"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x41000, 0x1}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000500)) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000300)={0x7, 0x21, 0x1}, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3f, 0x7fff4002}]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB=', \x00\x00', @ANYRES16=r5, @ANYBLOB="00012abd7000fedbdf250b000000180001801400020076657468305f746f5f626f6e64000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24040080) r6 = semget$private(0x0, 0x7, 0x191) semtimedop(r6, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r6, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) kernel console output (not intermixed with test programs): 52.834295][ T4175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.834308][ T4175] Call Trace: [ 52.834319][ T4175] [ 52.834328][ T4175] __dump_stack+0x1d/0x30 [ 52.834350][ T4175] dump_stack_lvl+0xe8/0x140 [ 52.834421][ T4175] dump_stack+0x15/0x1b [ 52.834470][ T4175] dump_header+0x81/0x240 [ 52.834488][ T4175] oom_kill_process+0x295/0x350 [ 52.834509][ T4175] out_of_memory+0x97b/0xb80 [ 52.834535][ T4175] try_charge_memcg+0x610/0xa10 [ 52.834565][ T4175] charge_memcg+0x51/0xc0 [ 52.834630][ T4175] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 52.834724][ T4175] __read_swap_cache_async+0x17b/0x2d0 [ 52.834755][ T4175] swap_cluster_readahead+0x362/0x3c0 [ 52.834873][ T4175] swapin_readahead+0xde/0x820 [ 52.834966][ T4175] ? __rcu_read_unlock+0x4f/0x70 [ 52.834986][ T4175] ? swap_cache_get_folio+0x277/0x280 [ 52.835012][ T4175] do_swap_page+0x2b4/0x21e0 [ 52.835038][ T4175] ? __list_add_valid_or_report+0x38/0xe0 [ 52.835080][ T4175] ? __pfx_default_wake_function+0x10/0x10 [ 52.835118][ T4175] handle_mm_fault+0x9d8/0x2c60 [ 52.835150][ T4175] ? __rcu_read_unlock+0x4f/0x70 [ 52.835181][ T4175] ? mt_find+0x21b/0x330 [ 52.835207][ T4175] do_user_addr_fault+0x3fe/0x1080 [ 52.835282][ T4175] exc_page_fault+0x62/0xa0 [ 52.835305][ T4175] asm_exc_page_fault+0x26/0x30 [ 52.835323][ T4175] RIP: 0010:strncpy_from_user+0xa4/0x260 [ 52.835382][ T4175] Code: 8e 5c ff 49 83 ff 07 0f 86 85 00 00 00 48 c7 04 24 00 00 00 00 4c 89 64 24 10 48 8b 6c 24 08 4c 89 7c 24 18 4d 89 fd 4d 89 e6 <4d> 8b 24 24 48 b8 ff fe fe fe fe fe fe fe 4d 8d 3c 04 4c 89 e3 48 [ 52.835437][ T4175] RSP: 0018:ffffc9000116fb30 EFLAGS: 00050212 [ 52.835525][ T4175] RAX: ffffffff81fb94bd RBX: ffff8881008d2000 RCX: ffff888101679080 [ 52.835537][ T4175] RDX: 0000000000000002 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 52.835548][ T4175] RBP: ffff8881008d2020 R08: 0001ffff86a0811f R09: 0000000000000000 [ 52.835559][ T4175] R10: ffff8881008d2000 R11: ffffffff81753e80 R12: 0000200000000480 [ 52.835619][ T4175] R13: 0000000000000fe0 R14: 0000200000000480 R15: 0000000000000fe0 [ 52.835634][ T4175] ? __pfx_perf_pmu_nop_void+0x10/0x10 [ 52.835664][ T4175] ? strncpy_from_user+0x7d/0x260 [ 52.835712][ T4175] getname_flags+0xae/0x3b0 [ 52.835738][ T4175] io_openat_prep+0x129/0x2b0 [ 52.835793][ T4175] io_submit_sqes+0x70f/0x11b0 [ 52.835837][ T4175] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 52.835877][ T4175] ? __rcu_read_unlock+0x4f/0x70 [ 52.835976][ T4175] ? _raw_spin_unlock+0x26/0x50 [ 52.835996][ T4175] ? finish_task_switch+0x7a/0x2a0 [ 52.836030][ T4175] ? trace_reschedule_exit+0xd/0xc0 [ 52.836062][ T4175] __x64_sys_io_uring_enter+0x78/0x90 [ 52.836096][ T4175] x64_sys_call+0x27e4/0x3000 [ 52.836149][ T4175] do_syscall_64+0xd8/0x2a0 [ 52.836181][ T4175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.836234][ T4175] RIP: 0033:0x7f0559f7f749 [ 52.836250][ T4175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.836269][ T4175] RSP: 002b:00007f05589df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 52.836289][ T4175] RAX: ffffffffffffffda RBX: 00007f055a1d5fa0 RCX: 00007f0559f7f749 [ 52.836303][ T4175] RDX: 000000000000addf RSI: 0000000000003518 RDI: 0000000000000007 [ 52.836317][ T4175] RBP: 00007f055a003f91 R08: 0000000000000000 R09: 0000000000000000 [ 52.836331][ T4175] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 52.836344][ T4175] R13: 00007f055a1d6038 R14: 00007f055a1d5fa0 R15: 00007ffeb59ebfd8 [ 52.836392][ T4175] [ 52.836398][ T4175] memory: usage 305640kB, limit 307200kB, failcnt 411 [ 53.010711][ T4191] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.193'. [ 53.013899][ T4175] memory+swap: usage 92412kB, limit 9007199254740988kB, failcnt 0 [ 53.013915][ T4175] kmem: usage 90916kB, limit 9007199254740988kB, failcnt 0 [ 53.013927][ T4175] Memory cgroup stats for [ 53.021891][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 53.029859][ T4175] /syz3: [ 53.127980][ T29] audit: type=1326 audit(1765653823.831:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abd8f749 code=0x7ffc0000 [ 53.148975][ T4175] cache 1052672 [ 53.156683][ T29] audit: type=1326 audit(1765653823.831:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14abd8f749 code=0x7ffc0000 [ 53.156705][ T29] audit: type=1326 audit(1765653823.831:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abd8f749 code=0x7ffc0000 [ 53.164656][ T4175] rss 126976 [ 53.172627][ T29] audit: type=1326 audit(1765653823.831:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f14abd8f749 code=0x7ffc0000 [ 53.180595][ T4175] shmem 0 [ 53.180603][ T4175] mapped_file 200704 [ 53.180611][ T4175] dirty 32768 [ 53.188600][ T29] audit: type=1326 audit(1765653823.831:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abd8f749 code=0x7ffc0000 [ 53.191565][ T4175] writeback 0 [ 53.191573][ T4175] workingset_refault_anon 67 [ 53.191580][ T4175] workingset_refault_file 244 [ 53.191587][ T4175] swap 262144 [ 53.191593][ T4175] swapcached 110592 [ 53.191599][ T4175] pgpgin 19632 [ 53.191606][ T4175] pgpgout 19343 [ 53.198350][ T29] audit: type=1326 audit(1765653823.831:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4181 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f14abd8f749 code=0x7ffc0000 [ 53.207390][ T4175] pgfault 24132 [ 53.207398][ T4175] pgmajfault 55 [ 53.207406][ T4175] inactive_anon 20480 [ 53.433765][ T4175] active_anon 110592 [ 53.433775][ T4175] inactive_file 0 [ 53.433782][ T4175] active_file 1048576 [ 53.433788][ T4175] unevictable 4096 [ 53.433793][ T4175] hierarchical_memory_limit 314572800 [ 53.433802][ T4175] hierarchical_memsw_limit 9223372036854771712 [ 53.433810][ T4175] total_cache 1052672 [ 53.433872][ T4175] total_rss 126976 [ 53.433878][ T4175] total_shmem 0 [ 53.433885][ T4175] total_mapped_file 200704 [ 53.433892][ T4175] total_dirty 32768 [ 53.433898][ T4175] total_writeback 0 [ 53.433904][ T4175] total_workingset_refault_anon 67 [ 53.433912][ T4175] total_workingset_refault_file 244 [ 53.433919][ T4175] total_swap 262144 [ 53.433926][ T4175] total_swapcached 110592 [ 53.433934][ T4175] total_pgpgin 19632 [ 53.433942][ T4175] total_pgpgout 19343 [ 53.433994][ T4175] total_pgfault 24132 [ 53.433998][ T4175] total_pgmajfault 55 [ 53.434002][ T4175] total_inactive_anon 20480 [ 53.434063][ T4175] total_active_anon 110592 [ 53.434067][ T4175] total_inactive_file 0 [ 53.434071][ T4175] total_active_file 1048576 [ 53.434076][ T4175] total_unevictable 4096 [ 53.434081][ T4175] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.189,pid=4173,uid=0 [ 53.434254][ T4175] Memory cgroup out of memory: Killed process 4173 (syz.3.189) total-vm:96200kB, anon-rss:1136kB, file-rss:22592kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 53.454727][ T4194] debugfs: 'ptm0' already exists in 'caif_serial' [ 53.462896][ T4175] +}[@ (4175) used greatest stack depth: 8856 bytes left [ 53.629696][ T4201] bridge_slave_0: left allmulticast mode [ 53.629756][ T4201] bridge_slave_0: left promiscuous mode [ 53.629908][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.712580][ T4201] bridge_slave_1: left allmulticast mode [ 53.718364][ T4201] bridge_slave_1: left promiscuous mode [ 53.724182][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.748343][ T4201] bond0: (slave bond_slave_0): Releasing backup interface [ 53.765343][ T4201] bond0: (slave bond_slave_1): Releasing backup interface [ 53.782520][ T4201] team0: Port device team_slave_0 removed [ 53.799989][ T4201] team0: Port device team_slave_1 removed [ 53.818805][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.828876][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.844493][ T4201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.861564][ T4212] netlink: 'syz.0.201': attribute type 4 has an invalid length. [ 53.908678][ T4219] netlink: 'syz.0.204': attribute type 30 has an invalid length. [ 53.916445][ T4219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 53.971296][ T4219] bond1: option arp_missed_max: invalid value (0) [ 53.977885][ T4219] bond1: option arp_missed_max: allowed values 1 - 255 [ 53.985559][ T4219] bond1 (unregistering): Released all slaves [ 54.000626][ T4222] veth2: entered promiscuous mode [ 54.005826][ T4222] veth2: entered allmulticast mode [ 54.036095][ T4223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.204'. [ 54.116585][ T4232] capability: warning: `syz.0.208' uses deprecated v2 capabilities in a way that may be insecure [ 54.174102][ T4233] lo speed is unknown, defaulting to 1000 [ 54.230966][ T4235] lo speed is unknown, defaulting to 1000 [ 54.764006][ T4246] lo speed is unknown, defaulting to 1000 [ 55.057423][ T4264] xt_policy: too many policy elements [ 55.120328][ T4256] serio: Serial port ptm1 [ 55.697712][ T4280] lo speed is unknown, defaulting to 1000 [ 55.894074][ T4287] netlink: 'syz.4.229': attribute type 30 has an invalid length. [ 55.901851][ T4287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 55.948127][ T4289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.229'. [ 55.974378][ T4287] bond1: option arp_missed_max: invalid value (0) [ 55.980920][ T4287] bond1: option arp_missed_max: allowed values 1 - 255 [ 56.003978][ T4287] bond1 (unregistering): Released all slaves [ 56.095716][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 56.168848][ T4305] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 56.182531][ T4305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.192274][ T4305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4305 comm=syz.0.235 [ 56.205185][ T4305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 56.404645][ T29] kauditd_printk_skb: 11732 callbacks suppressed [ 56.404735][ T29] audit: type=1400 audit(1765653827.769:13725): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 56.439345][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.445920][ T3046] audit: audit_lost=49 audit_rate_limit=0 audit_backlog_limit=64 [ 56.453701][ T3046] audit: backlog limit exceeded [ 56.454716][ T3323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.460198][ T4315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.465102][ T3323] audit: audit_lost=50 audit_rate_limit=0 audit_backlog_limit=64 [ 56.471598][ T4315] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 56.479276][ T3323] audit: backlog limit exceeded [ 56.487001][ T4315] audit: backlog limit exceeded [ 56.592049][ T4315] lo speed is unknown, defaulting to 1000 [ 56.600379][ T4328] IPv6: sit1: Disabled Multicast RS [ 56.845012][ T4339] netlink: 76 bytes leftover after parsing attributes in process `syz.2.247'. [ 56.884746][ T4339] 0: reclassify loop, rule prio 0, protocol 800 [ 57.042739][ T4345] lo speed is unknown, defaulting to 1000 [ 57.056653][ T4354] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 57.056653][ T4354] The task syz.1.248 (4354) triggered the difference, watch for misbehavior. [ 57.063183][ T4350] xt_l2tp: invalid flags combination: c [ 57.110631][ T4357] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 57.336839][ T4370] lo speed is unknown, defaulting to 1000 [ 57.479134][ T4380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=100 sclass=netlink_audit_socket pid=4380 comm=syz.4.263 [ 58.510296][ T4405] lo speed is unknown, defaulting to 1000 [ 58.525703][ T4410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=4410 comm=syz.4.275 [ 58.637834][ T4418] lo speed is unknown, defaulting to 1000 [ 58.751863][ T4432] lo speed is unknown, defaulting to 1000 [ 59.741035][ T4480] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 59.747597][ T4480] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.755061][ T4480] vhci_hcd vhci_hcd.0: Device attached [ 59.815073][ T4481] vhci_hcd: connection closed [ 59.815605][ T31] vhci_hcd vhci_hcd.4: stop threads [ 59.825577][ T31] vhci_hcd vhci_hcd.4: release socket [ 59.831000][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 59.877520][ T4488] lo speed is unknown, defaulting to 1000 [ 59.898845][ T4491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 59.907809][ T4491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 59.956712][ T4491] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.036493][ T4495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 60.115747][ T4498] syzkaller0: entered promiscuous mode [ 60.121272][ T4498] syzkaller0: entered allmulticast mode [ 60.326870][ T4511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.312'. [ 60.738619][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 61.175800][ T29] kauditd_printk_skb: 21990 callbacks suppressed [ 61.175815][ T29] audit: type=1400 audit(1765653832.787:34765): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.188743][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.210004][ T3046] audit: audit_lost=369 audit_rate_limit=0 audit_backlog_limit=64 [ 61.217993][ T3046] audit: backlog limit exceeded [ 61.223395][ T4575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.229917][ T4575] audit: audit_lost=370 audit_rate_limit=0 audit_backlog_limit=64 [ 61.232108][ T29] audit: type=1400 audit(1765653832.787:34766): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.237739][ T4575] audit: backlog limit exceeded [ 61.243211][ T4575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.259381][ T29] audit: type=1400 audit(1765653832.787:34767): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.733575][ T4599] lo speed is unknown, defaulting to 1000 [ 61.743137][ T4600] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.352'. [ 61.884014][ T4603] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 62.066658][ T4614] lo speed is unknown, defaulting to 1000 [ 62.473402][ T4637] lo speed is unknown, defaulting to 1000 [ 63.205767][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 63.219700][ T4664] lo speed is unknown, defaulting to 1000 [ 63.235017][ T4666] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 63.266213][ T4666] bond2: (slave lo): Enslaving as a backup interface with an up link [ 63.275109][ T4666] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 63.292823][ T1106] lo speed is unknown, defaulting to 1000 [ 63.297915][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 63.298655][ T1106] syz2: Port: 1 Link ACTIVE [ 63.312516][ T3830] lo speed is unknown, defaulting to 1000 [ 63.361741][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 63.385035][ T4675] bond2: (slave lo): Releasing backup interface [ 63.392472][ T4675] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 63.402610][ T4675] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 63.416941][ T4675] bond3: (slave lo): Enslaving as a backup interface with an up link [ 63.425259][ T4675] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 63.442439][ T3872] lo speed is unknown, defaulting to 1000 [ 63.448217][ T3829] lo speed is unknown, defaulting to 1000 [ 63.466049][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 63.559634][ T4684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.385'. [ 63.586445][ T4684] 0: reclassify loop, rule prio 0, protocol 800 [ 63.909540][ T4706] bridge_slave_0: left allmulticast mode [ 63.915344][ T4706] bridge_slave_0: left promiscuous mode [ 63.921074][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.944217][ T4710] netlink: 'syz.2.395': attribute type 10 has an invalid length. [ 63.952021][ T4710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.395'. [ 63.969873][ T4706] bridge_slave_1: left allmulticast mode [ 63.975623][ T4706] bridge_slave_1: left promiscuous mode [ 63.981262][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.995477][ T4706] bond0: (slave bond_slave_0): Releasing backup interface [ 64.005673][ T4706] bond0: (slave bond_slave_1): Releasing backup interface [ 64.028756][ T4706] team0: Port device team_slave_0 removed [ 64.054392][ T4706] team0: Port device team_slave_1 removed [ 64.063257][ T4706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.070674][ T4706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.079963][ T4706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.087446][ T4706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.120387][ T4710] batman_adv: batadv0: Adding interface: veth1_vlan [ 64.127104][ T4710] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.200382][ T4710] batman_adv: batadv0: Interface activated: veth1_vlan [ 64.231861][ T4715] lo speed is unknown, defaulting to 1000 [ 64.317511][ T4724] lo speed is unknown, defaulting to 1000 [ 64.381440][ T4732] netlink: 'syz.1.403': attribute type 4 has an invalid length. [ 64.606837][ T4738] syzkaller0: entered promiscuous mode [ 64.612394][ T4738] syzkaller0: entered allmulticast mode [ 65.133147][ T4749] lo speed is unknown, defaulting to 1000 [ 65.227205][ T4757] lo speed is unknown, defaulting to 1000 [ 65.421097][ T4769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=4769 comm=syz.1.415 [ 65.947488][ T29] kauditd_printk_skb: 25543 callbacks suppressed [ 65.947504][ T29] audit: type=1400 audit(1765653837.785:56598): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 65.975052][ T29] audit: type=1400 audit(1765653837.785:56599): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 65.996264][ T29] audit: type=1400 audit(1765653837.785:56600): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.017493][ T29] audit: type=1400 audit(1765653837.785:56601): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.038656][ T29] audit: type=1400 audit(1765653837.785:56602): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.059782][ T29] audit: type=1400 audit(1765653837.785:56603): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.080919][ T29] audit: type=1400 audit(1765653837.785:56604): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.102100][ T29] audit: type=1400 audit(1765653837.785:56605): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.116180][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 66.125072][ T4778] audit: audit_backlog=65 > audit_backlog_limit=64 [ 66.291308][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.298732][ T4790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.351622][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.359101][ T4790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.523230][ T4796] lo speed is unknown, defaulting to 1000 [ 66.760803][ T4806] lo speed is unknown, defaulting to 1000 [ 67.520696][ T4843] lo speed is unknown, defaulting to 1000 [ 67.537647][ T4844] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 67.564790][ T4844] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 67.724247][ T4847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.443'. [ 67.795781][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 68.099826][ T4864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.449'. [ 68.298028][ T4879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.453'. [ 68.534967][ T4897] lo speed is unknown, defaulting to 1000 [ 68.553207][ T4903] netlink: 96 bytes leftover after parsing attributes in process `syz.0.464'. [ 68.655529][ T4909] lo speed is unknown, defaulting to 1000 [ 68.905245][ T4918] SET target dimension over the limit! [ 69.028160][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.206040][ T4937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.472'. [ 69.393667][ T4952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.405406][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 69.443058][ T4956] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 69.449638][ T4956] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.457202][ T4956] vhci_hcd vhci_hcd.0: Device attached [ 69.465311][ T4957] vhci_hcd: connection closed [ 69.465404][ T12] vhci_hcd vhci_hcd.2: stop threads [ 69.475363][ T12] vhci_hcd vhci_hcd.2: release socket [ 69.480760][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 69.513713][ T4962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 69.623101][ T4967] bond0: (slave bond_slave_0): Releasing backup interface [ 69.634264][ T4967] bond0: (slave bond_slave_1): Releasing backup interface [ 69.647738][ T4967] team0: Port device team_slave_0 removed [ 69.658068][ T4968] netlink: 'syz.3.486': attribute type 10 has an invalid length. [ 69.658425][ T4967] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.665847][ T4968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.486'. [ 69.692056][ T4968] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 69.976513][ T4975] netlink: 'syz.2.489': attribute type 5 has an invalid length. [ 69.987776][ T4975] ip6erspan0: entered promiscuous mode [ 70.129383][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.136535][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.342470][ T4978] bridge_slave_0: left allmulticast mode [ 70.348284][ T4978] bridge_slave_0: left promiscuous mode [ 70.353993][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.406842][ T4978] bridge_slave_1: left allmulticast mode [ 70.412585][ T4978] bridge_slave_1: left promiscuous mode [ 70.418312][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.463414][ T4978] bond0: (slave bond_slave_0): Releasing backup interface [ 70.490414][ T4978] bond0: (slave bond_slave_1): Releasing backup interface [ 70.526579][ T4978] team0: Port device team_slave_0 removed [ 70.565044][ T4978] team0: Port device team_slave_1 removed [ 70.697311][ T4978] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.719407][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 70.736641][ T29] kauditd_printk_skb: 23421 callbacks suppressed [ 70.736733][ T29] audit: type=1400 audit(1765654098.815:78772): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.767787][ T29] audit: type=1400 audit(1765654098.826:78773): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.792121][ T29] audit: type=1400 audit(1765654098.847:78774): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.813325][ T29] audit: type=1400 audit(1765654098.847:78775): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.834528][ T29] audit: type=1400 audit(1765654098.847:78776): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.856424][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.859018][ T29] audit: type=1400 audit(1765654098.847:78777): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.865331][ T3046] audit: audit_lost=2028 audit_rate_limit=0 audit_backlog_limit=64 [ 70.886393][ T29] audit: type=1400 audit(1765654098.847:78778): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.886416][ T29] audit: type=1400 audit(1765654098.847:78779): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.896437][ T5000] netlink: 'syz.4.499': attribute type 10 has an invalid length. [ 70.944760][ T4996] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.961786][ T5000] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 70.987134][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.998606][ T5003] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 71.005141][ T5003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.012572][ T5003] vhci_hcd vhci_hcd.0: Device attached [ 71.074922][ T5004] vhci_hcd: connection closed [ 71.075004][ T2016] vhci_hcd vhci_hcd.3: stop threads [ 71.085044][ T2016] vhci_hcd vhci_hcd.3: release socket [ 71.090416][ T2016] vhci_hcd vhci_hcd.3: disconnect device [ 71.418371][ T5039] xt_hashlimit: max too large, truncated to 1048576 [ 71.495672][ T5046] bond3: (slave lo): Releasing backup interface [ 71.509772][ T5046] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 71.533027][ T5046] bridge_slave_0: left allmulticast mode [ 71.538826][ T5046] bridge_slave_0: left promiscuous mode [ 71.543946][ T5050] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 71.544469][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.585240][ T5052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5052 comm=syz.2.516 [ 71.601275][ T5046] bridge_slave_1: left allmulticast mode [ 71.606971][ T5046] bridge_slave_1: left promiscuous mode [ 71.612664][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.657945][ T5046] bond0: (slave bond_slave_0): Releasing backup interface [ 71.683480][ T5046] bond0: (slave bond_slave_1): Releasing backup interface [ 71.711934][ T5046] team0: Port device team_slave_0 removed [ 71.726145][ T5046] team0: Port device team_slave_1 removed [ 71.740020][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.757250][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.792642][ T3829] lo speed is unknown, defaulting to 1000 [ 71.798448][ T3829] syz2: Port: 1 Link DOWN [ 71.802786][ T10] lo speed is unknown, defaulting to 1000 [ 71.829151][ T5057] lo speed is unknown, defaulting to 1000 [ 72.314845][ T5080] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 72.321391][ T5080] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.328974][ T5080] vhci_hcd vhci_hcd.0: Device attached [ 72.387779][ T5088] netlink: '{/}\': attribute type 13 has an invalid length. [ 72.406452][ T5082] vhci_hcd: connection closed [ 72.406623][ T12] vhci_hcd vhci_hcd.1: stop threads [ 72.416605][ T12] vhci_hcd vhci_hcd.1: release socket [ 72.421977][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 72.424590][ T5093] lo speed is unknown, defaulting to 1000 [ 72.682820][ T5088] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 72.799778][ T2016] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.835943][ T2016] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.863070][ T2016] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.918203][ T2016] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.041069][ T5109] __nla_validate_parse: 2 callbacks suppressed [ 73.041082][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 73.131037][ T5112] lo speed is unknown, defaulting to 1000 [ 73.293352][ T5118] lo speed is unknown, defaulting to 1000 [ 73.571845][ T5135] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.076891][ T5165] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.262802][ T5176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.378528][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 74.436530][ T5190] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 74.678626][ T5206] lo speed is unknown, defaulting to 1000 [ 74.961580][ T5219] netlink: 'syz.2.583': attribute type 13 has an invalid length. [ 75.044036][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 75.068210][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 75.098363][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 75.484764][ T5258] lo speed is unknown, defaulting to 1000 [ 75.501519][ T29] kauditd_printk_skb: 22428 callbacks suppressed [ 75.501571][ T29] audit: type=1400 audit(1765654103.823:99857): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.534084][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 75.540698][ T3046] audit: audit_lost=2479 audit_rate_limit=0 audit_backlog_limit=64 [ 75.544563][ T3317] audit: audit_backlog=65 > audit_backlog_limit=64 [ 75.548621][ T3046] audit: backlog limit exceeded [ 75.550959][ T3316] audit: audit_backlog=65 > audit_backlog_limit=64 [ 75.555170][ T3317] audit: audit_lost=2480 audit_rate_limit=0 audit_backlog_limit=64 [ 75.555183][ T3317] audit: backlog limit exceeded [ 75.560043][ T3316] audit: audit_lost=2481 audit_rate_limit=0 audit_backlog_limit=64 [ 75.587189][ T3316] audit: backlog limit exceeded [ 75.715720][ T5272] lo speed is unknown, defaulting to 1000 [ 76.034236][ T5283] gtp0: entered promiscuous mode [ 76.039248][ T5283] gtp0: entered allmulticast mode [ 76.067157][ T5281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.081446][ T5284] netlink: 'syz.1.610': attribute type 21 has an invalid length. [ 76.090812][ T5281] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.118616][ T5281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.134209][ T5284] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 76.141887][ T5284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.610'. [ 76.269033][ T5288] can0: slcan on ptm0. [ 76.339666][ T5287] can0 (unregistered): slcan off ptm0. [ 76.611549][ T5303] xt_connbytes: Forcing CT accounting to be enabled [ 76.625766][ T5303] Cannot find set identified by id 0 to match [ 76.723483][ T5312] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 76.947633][ T5318] xt_hashlimit: max too large, truncated to 1048576 [ 77.035967][ T5345] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.144757][ T5354] xt_connbytes: Forcing CT accounting to be enabled [ 77.167360][ T5354] Cannot find set identified by id 0 to match [ 77.460015][ T5380] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.683917][ T5384] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.996955][ T5390] can0: slcan on ptm0. [ 78.079182][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 78.092725][ T5389] can0 (unregistered): slcan off ptm0. [ 78.275937][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 78.337168][ T5419] lo speed is unknown, defaulting to 1000 [ 78.547801][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 78.557716][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 78.567293][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 78.585585][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 78.607248][ T5447] lo speed is unknown, defaulting to 1000 [ 78.616525][ T5446] all: renamed from team_slave_0 [ 79.797247][ T5502] lo speed is unknown, defaulting to 1000 [ 79.964163][ T5510] binfmt_misc: register: failed to install interpreter file ./file0 [ 80.024057][ T5517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.711'. [ 80.064091][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'. [ 80.073067][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'. [ 80.273975][ T29] kauditd_printk_skb: 27888 callbacks suppressed [ 80.273987][ T29] audit: type=1400 audit(1765654114.826:126030): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.280600][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.301524][ T29] audit: type=1400 audit(1765654114.836:126031): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.321710][ T29] audit: type=1400 audit(1765654114.836:126032): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.329357][ T3046] audit: audit_lost=3054 audit_rate_limit=0 audit_backlog_limit=64 [ 80.350553][ T29] audit: type=1400 audit(1765654114.836:126033): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.358367][ T3046] audit: backlog limit exceeded [ 80.358920][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.379548][ T29] audit: type=1400 audit(1765654114.836:126034): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.384377][ T3046] audit: audit_lost=3055 audit_rate_limit=0 audit_backlog_limit=64 [ 81.011825][ T5542] lo speed is unknown, defaulting to 1000 [ 81.021747][ T5543] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 81.478682][ T5554] netlink: '+}[@': attribute type 4 has an invalid length. [ 81.781106][ T5560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5560 comm=syz.1.737 [ 81.794107][ T5558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.727'. [ 81.830548][ T5561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5561 comm=syz.1.737 [ 81.979973][ T5571] lo speed is unknown, defaulting to 1000 [ 82.164779][ T5577] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 82.184671][ T5577] hsr_slave_0: left promiscuous mode [ 82.197166][ T5577] hsr_slave_1: left promiscuous mode [ 82.211202][ T5578] lo speed is unknown, defaulting to 1000 [ 82.453318][ T5585] lo speed is unknown, defaulting to 1000 [ 83.093416][ T5608] bridge0: entered allmulticast mode [ 83.191250][ T5613] ip6t_rpfilter: unknown options [ 83.506811][ T5620] netlink: 'syz.1.750': attribute type 4 has an invalid length. [ 83.564663][ T5623] __nla_validate_parse: 3 callbacks suppressed [ 83.564675][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 83.616973][ T5619] netlink: '': attribute type 30 has an invalid length. [ 83.733440][ T5638] netlink: '+}[@': attribute type 13 has an invalid length. [ 83.791610][ T5647] netlink: '+}[@': attribute type 13 has an invalid length. [ 83.874009][ T5651] lo speed is unknown, defaulting to 1000 [ 84.833508][ T5680] netlink: 'syz.4.774': attribute type 1 has an invalid length. [ 84.881234][ T5680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.892720][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 84.901573][ T5682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.776'. [ 84.930548][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 84.976467][ T5684] vlan2: entered promiscuous mode [ 84.981547][ T5684] bond1: entered promiscuous mode [ 85.001529][ T5680] dummy0: entered promiscuous mode [ 85.026918][ T5680] bond1: (slave dummy0): making interface the new active one [ 85.046263][ T29] kauditd_printk_skb: 25419 callbacks suppressed [ 85.046277][ T29] audit: type=1400 audit(1765654119.844:148609): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.052837][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.074932][ T3316] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.080494][ T3046] audit: audit_lost=4004 audit_rate_limit=0 audit_backlog_limit=64 [ 85.087038][ T3316] audit: audit_lost=4005 audit_rate_limit=0 audit_backlog_limit=64 [ 85.094887][ T3046] audit: backlog limit exceeded [ 85.096033][ T5698] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.102762][ T3316] audit: backlog limit exceeded [ 85.102962][ T5697] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.107670][ T5698] audit: audit_lost=4006 audit_rate_limit=0 audit_backlog_limit=64 [ 85.118503][ T5680] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 85.148811][ T5682] bridge2: entered promiscuous mode [ 85.154085][ T5682] bridge2: entered allmulticast mode [ 85.189067][ T5704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36624 sclass=netlink_route_socket pid=5704 comm=syz.3.785 [ 85.206830][ T5696] lo speed is unknown, defaulting to 1000 [ 85.219341][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 85.275200][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'. [ 85.284110][ T5698] lo speed is unknown, defaulting to 1000 [ 85.340406][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 85.370663][ T5722] lo speed is unknown, defaulting to 1000 [ 85.379399][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 85.939843][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 85.948737][ T5742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.798'. [ 85.994451][ T5742] bridge1: entered promiscuous mode [ 85.999807][ T5742] bridge1: entered allmulticast mode [ 86.083530][ T5749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40208 sclass=netlink_route_socket pid=5749 comm=syz.2.800 [ 86.208764][ T5757] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 86.325376][ T5757] hsr_slave_0: left promiscuous mode [ 86.347217][ T5757] hsr_slave_1: left promiscuous mode [ 86.381848][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.407831][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.454786][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.473613][ T5762] lo speed is unknown, defaulting to 1000 [ 86.483945][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.781844][ T5789] netlink: '': attribute type 30 has an invalid length. [ 87.418254][ T5806] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 87.453745][ T31] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.495719][ T5806] hsr_slave_0: left promiscuous mode [ 87.522141][ T5806] hsr_slave_1: left promiscuous mode [ 87.574579][ T31] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.610256][ T31] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.660034][ T31] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.675023][ T5812] lo speed is unknown, defaulting to 1000 [ 88.044896][ T5840] netlink: '': attribute type 30 has an invalid length. [ 88.323009][ T5850] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 88.618540][ T5867] lo speed is unknown, defaulting to 1000 [ 88.798903][ T5880] __nla_validate_parse: 5 callbacks suppressed [ 88.798919][ T5880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.857'. [ 88.914694][ T5882] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.858'. [ 89.528581][ T5917] lo speed is unknown, defaulting to 1000 [ 89.762827][ T5923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5923 comm=syz.1.874 [ 89.817853][ T29] kauditd_printk_skb: 15983 callbacks suppressed [ 89.817867][ T29] audit: type=1400 audit(1765654124.842:164104): avc: denied { create } for pid=5925 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 89.843891][ T29] audit: type=1400 audit(1765654124.842:164105): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 89.847426][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.865151][ T29] audit: type=1400 audit(1765654124.842:164106): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 89.871639][ T3046] audit: audit_lost=4170 audit_rate_limit=0 audit_backlog_limit=64 [ 89.892842][ T29] audit: type=1400 audit(1765654124.853:164107): avc: denied { prog_load } for pid=5925 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.900705][ T3046] audit: backlog limit exceeded [ 89.919815][ T29] audit: type=1400 audit(1765654124.853:164108): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 89.945911][ T29] audit: type=1400 audit(1765654124.853:164109): avc: denied { map_create } for pid=5925 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.291620][ T5930] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.487392][ T5937] netlink: 'syz.0.879': attribute type 4 has an invalid length. [ 90.495185][ T5937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.879'. [ 90.555823][ T5937] .`: renamed from bond0 [ 90.812425][ T5956] lo speed is unknown, defaulting to 1000 [ 90.961727][ T5960] netlink: 'syz.3.887': attribute type 13 has an invalid length. [ 91.652564][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 92.052051][ T54] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.418884][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 93.477062][ T6035] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 93.484852][ T6035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.915'. [ 93.596740][ T6049] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 93.960849][ T6068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6068 comm=syz.3.929 [ 93.998905][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.005243][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 94.589130][ T29] kauditd_printk_skb: 22919 callbacks suppressed [ 94.589142][ T29] audit: type=1400 audit(1765654129.861:183727): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 94.632214][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.638838][ T3046] audit: audit_lost=5272 audit_rate_limit=0 audit_backlog_limit=64 [ 94.646756][ T3046] audit: backlog limit exceeded [ 94.646925][ T6107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.652049][ T6105] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.658255][ T6107] audit: audit_lost=5273 audit_rate_limit=0 audit_backlog_limit=64 [ 94.664764][ T6105] audit: audit_lost=5274 audit_rate_limit=0 audit_backlog_limit=64 [ 94.672635][ T6107] audit: backlog limit exceeded [ 94.685408][ T6105] audit: backlog limit exceeded [ 94.727963][ T6109] netlink: 'syz.2.945': attribute type 21 has an invalid length. [ 94.746146][ T6109] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 94.753812][ T6109] netlink: 144 bytes leftover after parsing attributes in process `syz.2.945'. [ 94.897008][ T6109] netlink: 'syz.2.945': attribute type 49 has an invalid length. [ 95.007346][ T6127] lo speed is unknown, defaulting to 1000 [ 95.015168][ T6128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6128 comm=syz.1.952 [ 95.341356][ T6141] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 95.477390][ T6147] lo speed is unknown, defaulting to 1000 [ 96.299000][ T6186] lo speed is unknown, defaulting to 1000 [ 97.102935][ T6202] lo speed is unknown, defaulting to 1000 [ 97.553762][ T6214] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 97.580318][ T6214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.603746][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 97.622605][ T6214] bond0 (unregistering): Released all slaves [ 98.358676][ T6242] x_tables: duplicate underflow at hook 1 [ 98.544407][ T6256] vlan2: entered promiscuous mode [ 98.549482][ T6256] hsr_slave_1: entered promiscuous mode [ 98.555136][ T6256] vlan2: entered allmulticast mode [ 98.560375][ T6256] hsr_slave_1: entered allmulticast mode [ 98.581590][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 98.670222][ T6268] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 98.751095][ T6275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 98.757631][ T6275] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.765237][ T6275] vhci_hcd vhci_hcd.0: Device attached [ 98.825741][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 98.834901][ T6276] vhci_hcd: connection closed [ 98.835251][ T54] vhci_hcd vhci_hcd.2: stop threads [ 98.845161][ T54] vhci_hcd vhci_hcd.2: release socket [ 98.850640][ T54] vhci_hcd vhci_hcd.2: disconnect device [ 98.877184][ T6285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6285 comm=syz.4.1011 [ 99.133640][ T6306] lo speed is unknown, defaulting to 1000 [ 99.362437][ T29] kauditd_printk_skb: 21383 callbacks suppressed [ 99.362452][ T29] audit: type=1326 audit(1765654134.869:202702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.362566][ T29] audit: type=1326 audit(1765654134.869:202703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.362607][ T29] audit: type=1326 audit(1765654134.869:202704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.362776][ T29] audit: type=1326 audit(1765654134.869:202705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.362851][ T29] audit: type=1326 audit(1765654134.869:202706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.362922][ T29] audit: type=1326 audit(1765654134.869:202707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.363132][ T29] audit: type=1326 audit(102.381:202708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.363188][ T29] audit: type=1326 audit(102.381:202709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.363415][ T29] audit: type=1326 audit(102.381:202710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.363585][ T29] audit: type=1326 audit(102.381:202711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.1.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb8d568f749 code=0x7ffc0000 [ 99.440790][ T6320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.806737][ T6340] netlink: 'syz.2.1032': attribute type 3 has an invalid length. [ 100.620498][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 100.823486][ T6392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.833267][ T6392] bond1 (unregistering): Released all slaves [ 100.862490][ T6395] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 100.878956][ T6396] netlink: 'syz.3.1052': attribute type 10 has an invalid length. [ 100.912989][ T6396] dummy0: left promiscuous mode [ 100.931786][ T6396] team0: Port device dummy0 added [ 101.155334][ T6424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.164834][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 101.178709][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 101.303582][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1071'. [ 101.312636][ T6438] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1071'. [ 101.327513][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1071'. [ 101.337133][ T6438] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1071'. [ 101.375186][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 101.618960][ T6464] lo speed is unknown, defaulting to 1000 [ 101.760124][ T6472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1086'. [ 101.865028][ T6479] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 101.873360][ T6479] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 101.934569][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 102.721638][ T6532] batman_adv: batadv0: Removing interface: veth1_vlan [ 103.402139][ T6555] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.476436][ T6560] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 103.483053][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.490584][ T6560] vhci_hcd vhci_hcd.0: Device attached [ 103.501570][ T6562] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 103.512097][ T6560] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 103.518691][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.526257][ T6560] vhci_hcd vhci_hcd.0: Device attached [ 103.532641][ T6560] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 103.541459][ T6560] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.579424][ T6560] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.589295][ T6564] vhci_hcd: connection closed [ 103.589437][ T6561] vhci_hcd: connection closed [ 103.594356][ T12] vhci_hcd vhci_hcd.0: stop threads [ 103.604252][ T12] vhci_hcd vhci_hcd.0: release socket [ 103.609655][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 103.620697][ T12] vhci_hcd vhci_hcd.0: stop threads [ 103.625938][ T12] vhci_hcd vhci_hcd.0: release socket [ 103.631361][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 103.666865][ T3872] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 103.673698][ T6572] lo speed is unknown, defaulting to 1000 [ 104.016765][ T6596] netlink: 'syz.4.1133': attribute type 21 has an invalid length. [ 104.043691][ T6595] lo speed is unknown, defaulting to 1000 [ 104.134839][ T29] kauditd_printk_skb: 20455 callbacks suppressed [ 104.134853][ T29] audit: type=1400 audit(107.389:222753): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.134892][ T29] audit: type=1400 audit(107.389:222754): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.135155][ T29] audit: type=1400 audit(107.389:222755): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.135236][ T29] audit: type=1400 audit(107.389:222756): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.135390][ T29] audit: type=1400 audit(107.389:222757): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.135432][ T29] audit: type=1400 audit(107.389:222758): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.135504][ T29] audit: type=1400 audit(107.389:222759): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.135589][ T29] audit: type=1400 audit(107.389:222760): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.135608][ T29] audit: type=1400 audit(107.389:222761): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.135626][ T29] audit: type=1400 audit(107.389:222762): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.189490][ T6598] lo speed is unknown, defaulting to 1000 [ 104.596295][ T6617] netlink: 'syz.1.1141': attribute type 5 has an invalid length. [ 104.600521][ T6617] batman_adv: batadv0: Adding interface: vxlan0 [ 104.600535][ T6617] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.600639][ T6617] batman_adv: batadv0: Interface activated: vxlan0 [ 104.601372][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.601433][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.601498][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.601529][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.789802][ T6633] netlink: 'syz.0.1148': attribute type 21 has an invalid length. [ 104.996079][ T6656] netlink: 'syz.3.1156': attribute type 10 has an invalid length. [ 105.233016][ T6670] lo speed is unknown, defaulting to 1000 [ 105.718309][ T6696] lo speed is unknown, defaulting to 1000 [ 105.853934][ T6704] netlink: 'syz.4.1176': attribute type 5 has an invalid length. [ 106.013779][ T6711] __nla_validate_parse: 12 callbacks suppressed [ 106.013792][ T6711] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1179'. [ 106.146707][ T6717] syzkaller0: entered promiscuous mode [ 106.152225][ T6717] syzkaller0: entered allmulticast mode [ 106.200974][ T6716] lo speed is unknown, defaulting to 1000 [ 106.299517][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1184'. [ 106.527930][ T6734] netem: incorrect gi model size [ 106.689643][ T6743] lo speed is unknown, defaulting to 1000 [ 106.869639][ T6754] ip6gre1: entered promiscuous mode [ 106.874895][ T6754] ip6gre1: entered allmulticast mode [ 106.895307][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.902876][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.906915][ T6754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.913585][ T6756] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1196'. [ 106.926978][ T3872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.011872][ T6760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.366630][ T6773] xt_hashlimit: max too large, truncated to 1048576 [ 107.379898][ T6773] No such timeout policy "syz1" [ 107.471181][ T6778] bond1 (unregistering): Released all slaves [ 107.677360][ T6793] lo speed is unknown, defaulting to 1000 [ 107.704371][ T6797] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 107.800562][ T3872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.867679][ T3872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.373397][ T6829] lo speed is unknown, defaulting to 1000 [ 108.797945][ T6852] syz.1.1235 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.905481][ T29] kauditd_printk_skb: 32686 callbacks suppressed [ 108.905494][ T29] audit: type=1400 audit(112.386:253043): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 108.945091][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.951672][ T3046] audit: audit_lost=7018 audit_rate_limit=0 audit_backlog_limit=64 [ 108.951699][ T6854] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.959591][ T3046] audit: backlog limit exceeded [ 108.959772][ T29] audit: type=1326 audit(112.396:253044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abd8f749 code=0x7ffc0000 [ 108.966145][ T6854] audit: audit_lost=7019 audit_rate_limit=0 audit_backlog_limit=64 [ 108.970959][ T29] audit: type=1326 audit(112.396:253045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.0.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abd8f749 code=0x7ffc0000 [ 108.970982][ T29] audit: type=1400 audit(112.417:253046): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 108.971005][ T29] audit: type=1400 audit(112.417:253047): avc: denied { open } for pid=6853 comm="syz.4.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 109.088881][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 109.171300][ T6871] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1243'. [ 109.467150][ T6888] can0: slcan on ptm0. [ 109.515211][ T6888] can0 (unregistered): slcan off ptm0. [ 109.529313][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6889 comm=syz.3.1250 [ 109.585179][ T6891] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1251'. [ 109.691158][ T6895] lo speed is unknown, defaulting to 1000 [ 109.736442][ T6902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6902 comm=syz.3.1255 [ 109.790278][ T6906] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 109.877731][ T6907] lo speed is unknown, defaulting to 1000 [ 110.032003][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.038770][ T6919] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 110.168530][ T6928] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.253933][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 110.422056][ T6940] team0: Port device dummy0 removed [ 110.827681][ T6944] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 110.847631][ T6944] team0: Port device dummy0 added [ 110.859153][ T6944] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 110.879370][ T6944] team0: Port device dummy0 removed [ 110.894139][ T6944] .`: (slave dummy0): Enslaving as an active interface with an up link [ 111.086543][ T6955] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 111.093085][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.100608][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 111.129600][ T6955] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 111.136137][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.143738][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 111.149241][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.179777][ T6962] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 111.186366][ T6962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.194069][ T6962] vhci_hcd vhci_hcd.0: Device attached [ 111.224584][ T6955] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(8) [ 111.231170][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.238695][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 111.264263][ T6955] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 111.270884][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.278411][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 111.302513][ T6955] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 111.309128][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 111.316932][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 111.326685][ T6955] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.351790][ T6955] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.359969][ T10] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 111.370550][ T6974] netlink: '{/}\': attribute type 13 has an invalid length. [ 111.378467][ T6955] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(20) [ 111.385065][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.392612][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 111.418040][ T6955] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(22) [ 111.424651][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 111.432355][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 111.467866][ T6962] vhci_hcd vhci_hcd.0: port 0 already used [ 111.488766][ T6977] vhci_hcd: connection closed [ 111.488911][ T6969] vhci_hcd: connection closed [ 111.488963][ T6971] vhci_hcd: connection closed [ 111.493720][ T6963] vhci_hcd: connection closed [ 111.498639][ T6966] vhci_hcd: connection closed [ 111.503400][ T6956] vhci_hcd: connection reset by peer [ 111.508010][ T6959] vhci_hcd: connection closed [ 111.518096][ T6975] vhci_hcd: connection closed [ 111.522878][ T12] vhci_hcd vhci_hcd.2: stop threads [ 111.532890][ T12] vhci_hcd vhci_hcd.2: release socket [ 111.538320][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 111.554602][ T12] vhci_hcd vhci_hcd.2: stop threads [ 111.559898][ T12] vhci_hcd vhci_hcd.2: release socket [ 111.565317][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 111.582370][ T12] vhci_hcd vhci_hcd.2: stop threads [ 111.587657][ T12] vhci_hcd vhci_hcd.2: release socket [ 111.593166][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 111.611514][ T12] vhci_hcd vhci_hcd.2: stop threads [ 111.616725][ T12] vhci_hcd vhci_hcd.2: release socket [ 111.622142][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 111.637951][ T12] vhci_hcd vhci_hcd.2: stop threads [ 111.643241][ T12] vhci_hcd vhci_hcd.2: release socket [ 111.648642][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 111.654570][ T12] vhci_hcd vhci_hcd.2: stop threads [ 111.659864][ T12] vhci_hcd vhci_hcd.2: release socket [ 111.665240][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 111.690582][ T12] vhci_hcd vhci_hcd.2: stop threads [ 111.695798][ T12] vhci_hcd vhci_hcd.2: release socket [ 111.701274][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 111.707379][ T12] vhci_hcd vhci_hcd.2: stop threads [ 111.712609][ T12] vhci_hcd vhci_hcd.2: release socket [ 111.718020][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 111.958242][ T6985] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 111.982599][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.988767][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 111.989034][ T6986] lo speed is unknown, defaulting to 1000 [ 112.135304][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.143550][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 112.174614][ T7001] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1287'. [ 112.256410][ T7006] ip6gre1: entered promiscuous mode [ 112.261755][ T7006] ip6gre1: entered allmulticast mode [ 112.276922][ T2104] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.284629][ T2104] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.296905][ T3486] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.306938][ T7006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.337222][ T2104] Bluetooth: hci1: Frame reassembly failed (-84) [ 112.346267][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 112.582581][ T3486] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.834884][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 112.944374][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 112.964385][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 112.985417][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 113.034265][ T7028] netlink: 63 bytes leftover after parsing attributes in process `syz.3.1297'. [ 113.175918][ T7039] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1299'. [ 113.202209][ T3486] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.372031][ T7048] netlink: 'syz.2.1313': attribute type 4 has an invalid length. [ 113.482612][ T7051] xt_hashlimit: max too large, truncated to 1048576 [ 113.489317][ T7051] No such timeout policy "syz1" [ 113.677811][ T29] kauditd_printk_skb: 30737 callbacks suppressed [ 113.677837][ T29] audit: type=1400 audit(117.398:280298): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.678491][ T7059] bond1 (unregistering): Released all slaves [ 113.690678][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 113.706946][ T29] audit: type=1400 audit(117.408:280299): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.710772][ T3046] audit: audit_lost=8182 audit_rate_limit=0 audit_backlog_limit=64 [ 113.717275][ T29] audit: type=1400 audit(117.408:280300): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.717385][ T29] audit: type=1400 audit(117.408:280301): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.717404][ T29] audit: type=1400 audit(117.408:280302): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.717426][ T29] audit: type=1400 audit(117.408:280303): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.717456][ T29] audit: type=1400 audit(117.408:280304): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.717548][ T29] audit: type=1400 audit(117.408:280305): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.025162][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 114.125672][ T4928] Bluetooth: hci0: command 0x1003 tx timeout [ 114.131842][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.277950][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 114.284079][ T3623] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 114.384251][ T7091] lo speed is unknown, defaulting to 1000 [ 114.599070][ T7105] lo speed is unknown, defaulting to 1000 [ 114.622445][ T7102] lo speed is unknown, defaulting to 1000 [ 115.378165][ T7133] lo speed is unknown, defaulting to 1000 [ 115.813126][ T7148] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 115.819669][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.827268][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 115.879104][ T7154] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 115.885680][ T7154] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.893198][ T7154] vhci_hcd vhci_hcd.0: Device attached [ 115.909173][ T7148] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(6) [ 115.915689][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.923320][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 115.959285][ T7154] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 115.965968][ T7154] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.973507][ T7154] vhci_hcd vhci_hcd.0: Device attached [ 116.006801][ T7148] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 116.013421][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.020971][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 116.053571][ T7148] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 116.060188][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 116.067897][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 116.078511][ T3486] usb 3-1: new high-speed USB device number 3 using vhci_hcd [ 116.098658][ T7148] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.122228][ T7148] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.134781][ T7148] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(20) [ 116.141475][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.149099][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 116.174003][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.185883][ T10] usb 5-1: enqueue for inactive port 0 [ 116.191429][ T10] usb 5-1: enqueue for inactive port 0 [ 116.198342][ T7148] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(22) [ 116.204938][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 116.212646][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 116.226239][ T7148] vhci_hcd vhci_hcd.0: port 0 already used [ 116.255406][ T7172] vhci_hcd: connection closed [ 116.255470][ T2104] vhci_hcd vhci_hcd.1: stop threads [ 116.255730][ T7168] vhci_hcd: connection closed [ 116.260264][ T2104] vhci_hcd vhci_hcd.1: release socket [ 116.266093][ T7165] vhci_hcd: connection closed [ 116.270162][ T2104] vhci_hcd vhci_hcd.1: disconnect device [ 116.272517][ T7177] vhci_hcd: connection closed [ 116.276037][ T7163] vhci_hcd: connection closed [ 116.290970][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 116.302435][ T7159] vhci_hcd: connection closed [ 116.302618][ T7151] vhci_hcd: connection reset by peer [ 116.316951][ T7155] vhci_hcd: connection closed [ 116.320149][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.342373][ T2104] vhci_hcd vhci_hcd.1: stop threads [ 116.347635][ T2104] vhci_hcd vhci_hcd.1: release socket [ 116.353006][ T2104] vhci_hcd vhci_hcd.1: disconnect device [ 116.378511][ T2104] vhci_hcd vhci_hcd.1: stop threads [ 116.383796][ T2104] vhci_hcd vhci_hcd.1: release socket [ 116.389345][ T2104] vhci_hcd vhci_hcd.1: disconnect device [ 116.408091][ T7176] x_tables: duplicate underflow at hook 1 [ 116.415541][ T2104] vhci_hcd vhci_hcd.1: stop threads [ 116.420748][ T2104] vhci_hcd vhci_hcd.1: release socket [ 116.426167][ T2104] vhci_hcd vhci_hcd.1: disconnect device [ 116.432433][ T2104] vhci_hcd vhci_hcd.1: stop threads [ 116.437683][ T2104] vhci_hcd vhci_hcd.1: release socket [ 116.443103][ T2104] vhci_hcd vhci_hcd.1: disconnect device [ 116.449386][ T2104] vhci_hcd vhci_hcd.1: stop threads [ 116.454656][ T2104] vhci_hcd vhci_hcd.1: release socket [ 116.460391][ T2104] vhci_hcd vhci_hcd.1: disconnect device [ 116.478804][ T2104] vhci_hcd vhci_hcd.1: stop threads [ 116.484082][ T2104] vhci_hcd vhci_hcd.1: release socket [ 116.489494][ T2104] vhci_hcd vhci_hcd.1: disconnect device [ 116.508872][ T2104] vhci_hcd vhci_hcd.1: stop threads [ 116.514104][ T2104] vhci_hcd vhci_hcd.1: release socket [ 116.519569][ T2104] vhci_hcd vhci_hcd.1: disconnect device [ 116.726506][ T7204] .`: (slave dummy0): Releasing backup interface [ 116.951339][ T7219] batadv1: entered promiscuous mode [ 116.956628][ T7219] batadv1: entered allmulticast mode [ 117.085994][ T7222] x_tables: duplicate underflow at hook 1 [ 117.272384][ T7242] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 117.817217][ T7255] lo speed is unknown, defaulting to 1000 [ 118.112953][ T7266] __nla_validate_parse: 6 callbacks suppressed [ 118.112966][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1376'. [ 118.231350][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.450165][ T29] kauditd_printk_skb: 21405 callbacks suppressed [ 118.450181][ T29] audit: type=1400 audit(378.417:301095): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.456509][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.456718][ T29] audit: type=1400 audit(378.417:301096): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.477155][ T3046] audit: audit_lost=8388 audit_rate_limit=0 audit_backlog_limit=64 [ 118.477170][ T3046] audit: backlog limit exceeded [ 118.477649][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.483795][ T29] audit: type=1400 audit(378.417:301097): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.504364][ T3046] audit: audit_lost=8389 audit_rate_limit=0 audit_backlog_limit=64 [ 118.504377][ T3046] audit: backlog limit exceeded [ 118.504570][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.764615][ T3872] usb usb6-port1: attempt power cycle [ 118.881121][ T7309] netlink: 'syz.3.1395': attribute type 4 has an invalid length. [ 119.450885][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 119.755165][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.783350][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 120.359574][ T7375] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 120.389512][ T7375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.420229][ T7375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.436371][ T7375] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 120.461435][ T7375] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 120.489206][ T7377] gretap1: entered promiscuous mode [ 120.497404][ T7377] bond1: (slave gretap1): making interface the new active one [ 120.514368][ T7377] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 120.528679][ T7378] macvlan2: entered promiscuous mode [ 120.533978][ T7378] macvlan2: entered allmulticast mode [ 120.546076][ T3872] usb usb6-port1: unable to enumerate USB device [ 120.555912][ T7378] bond1: entered promiscuous mode [ 120.570434][ T7378] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.589800][ T7378] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 120.606866][ T7378] bond1: left promiscuous mode [ 120.687070][ T7386] lo speed is unknown, defaulting to 1000 [ 120.692545][ T7387] Process accounting resumed [ 120.974532][ T3486] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 121.021146][ T7398] lo speed is unknown, defaulting to 1000 [ 121.436337][ T7425] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1437'. [ 121.457210][ T7425] bond0 (unregistering): Released all slaves [ 121.476099][ T7427] netlink: 'syz.0.1436': attribute type 5 has an invalid length. [ 121.511795][ T7427] batman_adv: batadv0: Adding interface: vxlan0 [ 121.518203][ T7427] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.545078][ T7427] batman_adv: batadv0: Interface activated: vxlan0 [ 121.568863][ T2104] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.579141][ T2104] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.605931][ T2104] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.655363][ T2104] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.690885][ T7433] lo speed is unknown, defaulting to 1000 [ 121.810219][ T7438] lo speed is unknown, defaulting to 1000 [ 122.399555][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.421565][ T7448] bond0 (unregistering): Released all slaves [ 122.437299][ T7453] netlink: 'syz.1.1453': attribute type 10 has an invalid length. [ 122.452082][ T7453] team0: Port device dummy0 added [ 122.464515][ T7446] lo speed is unknown, defaulting to 1000 [ 122.590984][ T7460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 122.749219][ T7465] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 122.944014][ T7476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1450'. [ 122.960890][ T7478] serio: Serial port ptm0 [ 123.039600][ T7484] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1454'. [ 123.061737][ T7485] $Hÿ: renamed from .` [ 123.068037][ T7485] $Hÿ: entered promiscuous mode [ 123.223278][ T29] kauditd_printk_skb: 28517 callbacks suppressed [ 123.223292][ T29] audit: type=1400 audit(383.414:328437): avc: denied { create } for pid=7501 comm="syz.4.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 123.224942][ T7502] netlink: 'syz.4.1463': attribute type 10 has an invalid length. [ 123.229839][ T29] audit: type=1400 audit(383.414:328438): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.248860][ T7502] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1463'. [ 123.256647][ T29] audit: type=1400 audit(383.414:328439): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.256699][ T29] audit: type=1400 audit(383.414:328440): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.312021][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 123.327467][ T29] audit: type=1400 audit(383.414:328441): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.333956][ T3046] audit: audit_lost=8783 audit_rate_limit=0 audit_backlog_limit=64 [ 123.354571][ T29] audit: type=1400 audit(383.414:328442): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.362415][ T3046] audit: backlog limit exceeded [ 123.387890][ T29] audit: type=1400 audit(383.414:328443): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 123.405009][ T1106] usb usb4-port1: attempt power cycle [ 123.615241][ T7520] lo speed is unknown, defaulting to 1000 [ 123.662348][ T7526] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 123.696817][ T7526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.720113][ T7529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.727265][ T7529] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.738579][ T7529] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 123.776048][ T7526] bond2: entered promiscuous mode [ 123.782136][ T7526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.790599][ T7526] bond1: (slave bond2): Enslaving as an active interface with a down link [ 123.817325][ T7526] macvlan2: entered promiscuous mode [ 123.822662][ T7526] macvlan2: entered allmulticast mode [ 123.828409][ T7526] bond1: entered promiscuous mode [ 123.833792][ T7526] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.851079][ T7526] bond1: left promiscuous mode [ 124.022709][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.114349][ T7556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.179258][ T7559] lo speed is unknown, defaulting to 1000 [ 124.262304][ T7563] wireguard0: entered promiscuous mode [ 124.267854][ T7563] wireguard0: entered allmulticast mode [ 124.459927][ T7570] lo speed is unknown, defaulting to 1000 [ 124.607402][ T7579] lo speed is unknown, defaulting to 1000 [ 124.815370][ T7592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.827017][ T7592] bond2 (unregistering): Released all slaves [ 124.857790][ T7594] netlink: 'syz.2.1494': attribute type 10 has an invalid length. [ 125.056815][ T7597] lo speed is unknown, defaulting to 1000 [ 125.156738][ T1106] usb usb4-port1: unable to enumerate USB device [ 125.566354][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 125.756274][ T7612] lo speed is unknown, defaulting to 1000 [ 125.801141][ T7613] lo speed is unknown, defaulting to 1000 [ 126.156823][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 126.162842][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.434871][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 126.587906][ T7639] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.943872][ T7653] lo speed is unknown, defaulting to 1000 [ 127.351052][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 127.480588][ T7671] lo speed is unknown, defaulting to 1000 [ 127.585501][ T7677] bond0 (unregistering): Released all slaves [ 127.603013][ T7679] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 127.631504][ T7676] lo speed is unknown, defaulting to 1000 [ 127.836690][ T7682] netlink: 'syz.0.1526': attribute type 29 has an invalid length. [ 127.874593][ T7684] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 127.891666][ T7685] netlink: 'syz.0.1526': attribute type 29 has an invalid length. [ 127.997776][ T29] kauditd_printk_skb: 29647 callbacks suppressed [ 127.997792][ T29] audit: type=1400 audit(388.432:356006): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.035185][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.041680][ T29] audit: type=1400 audit(388.432:356007): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.041715][ T3046] audit: audit_lost=9479 audit_rate_limit=0 audit_backlog_limit=64 [ 128.041730][ T3046] audit: backlog limit exceeded [ 128.052055][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.062369][ T29] audit: type=1400 audit(388.432:356008): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.070191][ T3046] audit: audit_lost=9480 audit_rate_limit=0 audit_backlog_limit=64 [ 128.075031][ T29] audit: type=1400 audit(388.432:356009): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.075054][ T29] audit: type=1400 audit(388.432:356010): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 128.470732][ T7703] lo speed is unknown, defaulting to 1000 [ 128.792105][ T7718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.803445][ T7720] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 128.909149][ T7726] xt_hashlimit: max too large, truncated to 1048576 [ 128.970822][ T7728] lo speed is unknown, defaulting to 1000 [ 129.071885][ T7730] bond0 (unregistering): Released all slaves [ 129.643171][ T1106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.653056][ T7742] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.013448][ T7751] lo speed is unknown, defaulting to 1000 [ 130.185813][ T1106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.639254][ T7777] bond2 (unregistering): Released all slaves [ 130.791294][ T7786] netlink: 'syz.4.1558': attribute type 13 has an invalid length. [ 131.780638][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 131.998641][ T7784] netlink: 'syz.1.1560': attribute type 4 has an invalid length. [ 132.032451][ T7796] lo speed is unknown, defaulting to 1000 [ 132.182771][ T7811] lo speed is unknown, defaulting to 1000 [ 132.297646][ T7821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7821 comm=wg1 [ 132.313969][ T7821] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 132.375812][ T7825] lo speed is unknown, defaulting to 1000 [ 132.486664][ T7830] xt_TCPMSS: Only works on TCP SYN packets [ 132.615576][ T1106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.646330][ T7840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7840 comm=syz.3.1578 [ 132.663230][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 132.767234][ T29] kauditd_printk_skb: 24297 callbacks suppressed [ 132.767246][ T29] audit: type=1400 audit(393.440:378291): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.788661][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.800823][ T3046] audit: audit_lost=10153 audit_rate_limit=0 audit_backlog_limit=64 [ 132.802498][ T7859] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.808846][ T3046] audit: backlog limit exceeded [ 132.809465][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.815424][ T7859] audit: audit_lost=10154 audit_rate_limit=0 audit_backlog_limit=64 [ 132.820262][ T3046] audit: audit_lost=10155 audit_rate_limit=0 audit_backlog_limit=64 [ 132.826846][ T7859] audit: backlog limit exceeded [ 132.834749][ T3046] audit: backlog limit exceeded [ 132.893553][ T7861] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.981947][ T7863] xt_TCPMSS: Only works on TCP SYN packets [ 133.167300][ T1106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.370712][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 133.379913][ T7877] batman_adv: batadv0: Interface deactivated: vxlan0 [ 133.386729][ T7877] batman_adv: batadv0: Removing interface: vxlan0 [ 133.692305][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 133.718193][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 133.763839][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 134.181787][ T7913] lo speed is unknown, defaulting to 1000 [ 134.250313][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1608'. [ 134.265866][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 134.274896][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 134.288741][ T7922] netlink: 'syz.0.1607': attribute type 13 has an invalid length. [ 134.358141][ T7922] batman_adv: batadv0: Interface deactivated: vxlan0 [ 134.367150][ T1925] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.391734][ T1925] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.410572][ T1925] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.423880][ T1925] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.436072][ T7930] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.472689][ T7935] netlink: 'syz.4.1613': attribute type 13 has an invalid length. [ 134.498407][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.509812][ T7935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.647298][ T7952] lo speed is unknown, defaulting to 1000 [ 134.920547][ T7969] netlink: 'syz.0.1624': attribute type 7 has an invalid length. [ 134.928329][ T7969] netlink: 'syz.0.1624': attribute type 8 has an invalid length. [ 135.283768][ T7977] lo speed is unknown, defaulting to 1000 [ 135.297379][ T7980] netlink: 'syz.1.1627': attribute type 21 has an invalid length. [ 135.325434][ T7980] netlink: 'syz.1.1627': attribute type 1 has an invalid length. [ 135.720721][ T7979] netlink: 'syz.0.1629': attribute type 4 has an invalid length. [ 135.900636][ T8006] batman_adv: batadv0: Removing interface: vxlan0 [ 136.208573][ T8015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8015 comm=syz.0.1641 [ 136.638862][ T8026] __nla_validate_parse: 5 callbacks suppressed [ 136.638877][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1644'. [ 136.654154][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1644'. [ 137.146391][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 137.184392][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 137.246732][ T8042] lo speed is unknown, defaulting to 1000 [ 137.477802][ T8060] xt_policy: too many policy elements [ 137.539723][ T29] kauditd_printk_skb: 24999 callbacks suppressed [ 137.539738][ T29] audit: type=1400 audit(654.451:401674): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.555761][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.573301][ T3046] audit: audit_lost=10695 audit_rate_limit=0 audit_backlog_limit=64 [ 137.580370][ T8064] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.581281][ T3046] audit: backlog limit exceeded [ 137.587791][ T8064] audit: audit_lost=10696 audit_rate_limit=0 audit_backlog_limit=64 [ 137.600655][ T8064] audit: backlog limit exceeded [ 137.621375][ T29] audit: type=1400 audit(654.451:401675): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.642020][ T29] audit: type=1400 audit(654.451:401676): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.650474][ T3046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.224674][ T8080] lo speed is unknown, defaulting to 1000 [ 138.291244][ T8091] lo speed is unknown, defaulting to 1000 [ 138.328649][ T8095] loop3: detected capacity change from 0 to 1024 [ 138.338406][ T8097] netlink: 'syz.4.1667': attribute type 4 has an invalid length. [ 138.368034][ T8095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.384591][ T8095] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.1669: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.402054][ T8095] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 138.414592][ T8095] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.414592][ T8095] [ 138.426529][ T8095] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1669: lblock 0 mapped to illegal pblock 0 (length 3) [ 138.440024][ T8095] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 138.452400][ T8095] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.452400][ T8095] [ 138.572134][ T8107] loop0: detected capacity change from 0 to 128 [ 138.654047][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.698673][ T8108] wg2: entered promiscuous mode [ 138.703599][ T8108] wg2: entered allmulticast mode [ 138.721868][ T8109] lo speed is unknown, defaulting to 1000 [ 138.938071][ T8111] 9p: Bad value for 'rfdno' [ 139.015454][ T8114] netlink: 'syz.1.1672': attribute type 30 has an invalid length. [ 139.045767][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 139.109115][ T3486] hid (null): report_id 3804673681 is invalid [ 139.115269][ T3486] hid (null): global environment stack underflow [ 139.121655][ T3486] hid (null): report_id 0 is invalid [ 139.126980][ T3486] hid (null): invalid report_size 11153 [ 139.132603][ T3486] hid (null): unknown global tag 0xe [ 139.137905][ T3486] hid (null): unknown global tag 0xc2 [ 139.143444][ T3486] hid (null): unknown global tag 0xe [ 139.150410][ T3486] hid-generic 0002:0400:01F0.0001: report_id 3804673681 is invalid [ 139.158305][ T3486] hid-generic 0002:0400:01F0.0001: item 0 4 1 8 parsing failed [ 139.166029][ T3486] hid-generic 0002:0400:01F0.0001: probe with driver hid-generic failed with error -22 [ 139.194520][ T1925] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:11: lblock 4 mapped to illegal pblock 4 (length 2) [ 139.210385][ T1925] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 139.222735][ T1925] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.222735][ T1925] [ 139.245535][ T8129] loop4: detected capacity change from 0 to 128 [ 139.262023][ T31] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 139.289700][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 139.302043][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.302043][ T31] [ 139.324924][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.424013][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1677'. [ 139.442308][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 140.189891][ T8159] netlink: 'syz.3.1686': attribute type 4 has an invalid length. [ 140.243392][ T8161] loop4: detected capacity change from 0 to 512 [ 140.274205][ T8163] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.341715][ T8161] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.360596][ T8161] EXT4-fs (loop4): mount failed [ 140.991119][ T36] IPVS: starting estimator thread 0... [ 141.092629][ T8189] IPVS: using max 2304 ests per chain, 115200 per kthread [ 141.099912][ T8191] loop3: detected capacity change from 0 to 1764 [ 141.247144][ T8194] loop4: detected capacity change from 0 to 512 [ 141.291337][ T8194] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1693: EA inode hash validation failed [ 141.310709][ T8194] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1693: corrupted inode contents [ 141.327012][ T8194] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.1693: mark_inode_dirty error [ 141.341112][ T8194] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1693: corrupted inode contents [ 141.359155][ T8194] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.1693: mark_inode_dirty error [ 141.373377][ T8194] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.1693: mark inode dirty (error -117) [ 141.387651][ T8194] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 141.397941][ T8194] EXT4-fs (loop4): 1 orphan inode deleted [ 141.408049][ T8194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.516437][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 141.532352][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 141.587830][ T8214] tipc: Started in network mode [ 141.592771][ T8214] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 141.601634][ T8214] tipc: Enabling of bearer rejected, failed to enable media [ 141.664981][ T8216] veth2: entered promiscuous mode [ 141.670034][ T8216] veth2: entered allmulticast mode [ 141.931674][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.943978][ T8220] loop1: detected capacity change from 0 to 512 [ 141.966131][ T8220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.996995][ T8220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.068728][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.197470][ T24] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 142.271175][ T8231] loop0: detected capacity change from 0 to 8192 [ 142.372349][ T29] kauditd_printk_skb: 4802 callbacks suppressed [ 142.372362][ T29] audit: type=1400 audit(659.522:406476): avc: denied { unlink } for pid=3323 comm="syz-executor" name="file0" dev="tmpfs" ino=1911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.433378][ T8234] lo speed is unknown, defaulting to 1000 [ 142.478573][ T8237] loop2: detected capacity change from 0 to 1024 [ 142.496246][ T8237] EXT4-fs: Ignoring removed orlov option [ 142.530815][ T8237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.567859][ T29] audit: type=1400 audit(659.721:406477): avc: denied { write open } for pid=8236 comm="syz.2.1706" path="/338/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.855215][ T8234] netlink: 'syz.1.1705': attribute type 2 has an invalid length. [ 142.866759][ T8241] tap0: tun_chr_ioctl cmd 1074025681 [ 142.901040][ T29] audit: type=1400 audit(660.078:406478): avc: denied { setattr } for pid=8236 comm="syz.2.1706" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.024811][ T8215] loop3: detected capacity change from 0 to 512 [ 143.061174][ T8215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.156672][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 143.167371][ T29] audit: type=1400 audit(660.351:406479): avc: denied { ioctl } for pid=8243 comm="syz.4.1708" path="socket:[22916]" dev="sockfs" ino=22916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.346498][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.439610][ T8215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.502973][ T29] audit: type=1400 audit(660.676:406480): avc: denied { write } for pid=8245 comm="syz.0.1707" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 143.524926][ T8253] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1707'. [ 143.528050][ T8252] lo speed is unknown, defaulting to 1000 [ 143.580751][ T29] audit: type=1326 audit(660.792:406481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559f7f749 code=0x7ffc0000 [ 143.625106][ T8234] Set syz1 is full, maxelem 65536 reached [ 143.636201][ T29] audit: type=1326 audit(660.792:406482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559f7f749 code=0x7ffc0000 [ 143.659204][ T29] audit: type=1326 audit(660.792:406483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0559f7f749 code=0x7ffc0000 [ 143.682217][ T29] audit: type=1326 audit(660.792:406484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559f7f749 code=0x7ffc0000 [ 143.705224][ T29] audit: type=1326 audit(660.792:406485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559f7f749 code=0x7ffc0000 [ 143.728650][ T8255] loop2: detected capacity change from 0 to 512 [ 143.744970][ T8255] FAT-fs (loop2): Directory bread(block 199916) failed [ 143.756256][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.766527][ T8255] FAT-fs (loop2): Directory bread(block 199917) failed [ 143.774513][ T8255] FAT-fs (loop2): Directory bread(block 199918) failed [ 143.812204][ T8255] FAT-fs (loop2): Directory bread(block 199919) failed [ 143.816876][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1710'. [ 143.828284][ T8255] FAT-fs (loop2): Directory bread(block 199920) failed [ 143.835276][ T8255] FAT-fs (loop2): Directory bread(block 199921) failed [ 143.842765][ T8255] FAT-fs (loop2): Directory bread(block 199922) failed [ 143.851271][ T8255] FAT-fs (loop2): Directory bread(block 199923) failed [ 143.902186][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'. [ 143.904429][ T8262] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.944593][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 143.979309][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1710'. [ 144.075176][ T8269] netlink: 'syz.4.1713': attribute type 21 has an invalid length. [ 144.106135][ T8269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1713'. [ 144.119017][ T8274] loop3: detected capacity change from 0 to 1024 [ 144.140240][ T8276] loop4: detected capacity change from 0 to 512 [ 144.156308][ T8276] EXT4-fs: Ignoring removed orlov option [ 144.162108][ T8276] EXT4-fs: Ignoring removed i_version option [ 144.174400][ T8271] loop1: detected capacity change from 0 to 512 [ 144.190207][ T8271] ext4: Bad value for 'journal_dev' [ 144.195966][ T8276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.219965][ T8276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.250739][ T8271] loop1: detected capacity change from 0 to 2048 [ 144.275154][ T8269] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1713: corrupted inode contents [ 144.313055][ T8271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.354514][ T8269] EXT4-fs (loop4): Remounting filesystem read-only [ 144.440780][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.504289][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.544042][ T8284] tipc: Enabling of bearer rejected, failed to enable media [ 144.567058][ T8284] tipc: Enabled bearer , priority 0 [ 144.710643][ T8275] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1714: bg 0: block 345: padding at end of block bitmap is not set [ 144.745027][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.757051][ T8275] EXT4-fs (loop1): Remounting filesystem read-only [ 144.765428][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.032261][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.076029][ T8292] loop3: detected capacity change from 0 to 512 [ 145.084254][ T8292] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.095291][ T8292] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1720: corrupted inode contents [ 145.107403][ T8292] EXT4-fs (loop3): Remounting filesystem read-only [ 145.113994][ T8292] EXT4-fs (loop3): 1 orphan inode deleted [ 145.120265][ T8292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.143554][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.306186][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.627202][ T3872] tipc: Node number set to 1 [ 145.803977][ T8309] netlink: 'syz.0.1724': attribute type 21 has an invalid length. [ 145.812215][ T8309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1724'. [ 145.824341][ T8309] loop0: detected capacity change from 0 to 512 [ 145.831774][ T8309] EXT4-fs: Ignoring removed orlov option [ 145.837474][ T8309] EXT4-fs: Ignoring removed i_version option [ 145.848255][ T8309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.875970][ T8309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.889838][ T8309] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.1724: corrupted inode contents [ 145.903531][ T3486] usb usb6-port1: attempt power cycle [ 145.904756][ T8309] EXT4-fs (loop0): Remounting filesystem read-only [ 145.931226][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.016783][ T8314] loop0: detected capacity change from 0 to 512 [ 146.026316][ T8314] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1725: corrupted inode contents [ 146.038833][ T8314] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 146.051763][ T8314] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1725: corrupted inode contents [ 146.063824][ T8314] EXT4-fs error (device loop0): ext4_evict_inode:301: inode #15: comm syz.0.1725: mark_inode_dirty error [ 146.075276][ T8314] EXT4-fs (loop0): 1 orphan inode deleted [ 146.081406][ T8314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.124990][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.164867][ T8318] loop4: detected capacity change from 0 to 128 [ 146.206395][ T8304] loop2: detected capacity change from 0 to 512 [ 146.223565][ T8304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.223687][ T8320] EXT4-fs: inline encryption not supported [ 146.258565][ T8320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.258711][ T8304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.327185][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.557701][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.576219][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.576219][ T8342] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 146.599097][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.599097][ T8342] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 146.633551][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.633551][ T8342] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 146.655972][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.655972][ T8342] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 146.684545][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.684545][ T8342] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 146.712954][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.712954][ T8342] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 146.726463][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.726463][ T8342] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 146.740259][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.740259][ T8342] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 146.761800][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.761800][ T8342] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 146.790104][ T8342] syz.0.1729: attempt to access beyond end of device [ 146.790104][ T8342] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 146.924695][ T8350] 9p: Bad value for 'rfdno' [ 147.016710][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1737'. [ 147.025718][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1737'. [ 147.034790][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1737'. [ 147.043802][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1737'. [ 147.116410][ T8375] EXT4-fs: Ignoring removed bh option [ 147.122098][ T8375] EXT4-fs: inline encryption not supported [ 147.128498][ T8375] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.140040][ T8375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 147.148422][ T29] kauditd_printk_skb: 721 callbacks suppressed [ 147.148435][ T29] audit: type=1326 audit(664.529:407205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee433465e7 code=0x7ffc0000 [ 147.178248][ T29] audit: type=1326 audit(664.540:407206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee432eb829 code=0x7ffc0000 [ 147.179895][ T8375] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1738: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.201171][ T29] audit: type=1326 audit(664.540:407207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fee4334f749 code=0x7ffc0000 [ 147.201199][ T29] audit: type=1326 audit(664.540:407208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee433465e7 code=0x7ffc0000 [ 147.229229][ T8375] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 147.237934][ T29] audit: type=1326 audit(664.540:407209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee432eb829 code=0x7ffc0000 [ 147.237958][ T29] audit: type=1326 audit(664.540:407210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fee4334f749 code=0x7ffc0000 [ 147.237979][ T29] audit: type=1326 audit(664.550:407211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee433465e7 code=0x7ffc0000 [ 147.284061][ T8375] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1738: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.291797][ T29] audit: type=1326 audit(664.550:407212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee432eb829 code=0x7ffc0000 [ 147.314691][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 147.337435][ T29] audit: type=1326 audit(664.550:407213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.4.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fee4334f749 code=0x7ffc0000 [ 147.367260][ T8375] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1738: Failed to acquire dquot type 0 [ 147.374984][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.420535][ T8375] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 147.430046][ T8375] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1738: mark_inode_dirty error [ 147.441439][ T8375] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 147.451664][ T8375] EXT4-fs (loop0): 1 orphan inode deleted [ 147.458110][ T8375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.470647][ T1639] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.485961][ T1639] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 147.499103][ T8375] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.509125][ T8375] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.1738: Invalid inode table block 1 in block_group 0 [ 147.522144][ T8375] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 147.532119][ T8375] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.1738: mark_inode_dirty error [ 147.655931][ T3486] usb usb6-port1: unable to enumerate USB device [ 147.702465][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.751240][ T8450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1741'. [ 147.796725][ T8459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1739'. [ 147.810797][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1739'. [ 147.819890][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1739'. [ 147.833271][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1739'. [ 147.842263][ T8459] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 147.850027][ T8459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1739'. [ 147.940806][ T8450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.956150][ T8450] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 148.610153][ T8512] lo speed is unknown, defaulting to 1000 [ 148.833989][ T8518] binfmt_misc: register: failed to install interpreter file ./file2 [ 149.333154][ T8524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=8524 comm=syz.3.1748 [ 149.346241][ T8525] 9p: Bad value for 'wfdno' [ 149.367434][ T8525] set_capacity_and_notify: 5 callbacks suppressed [ 149.367449][ T8525] loop2: detected capacity change from 0 to 512 [ 149.402908][ T8529] loop3: detected capacity change from 0 to 512 [ 149.421621][ T8525] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 149.430449][ T8529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.444552][ T8525] EXT4-fs (loop2): orphan cleanup on readonly fs [ 149.452890][ T8525] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1757: corrupted inode contents [ 149.465016][ T8529] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1750: iget: bad i_size value: 38620345925642 [ 149.465128][ T8525] EXT4-fs (loop2): Remounting filesystem read-only [ 149.484565][ T8529] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1750: couldn't read orphan inode 15 (err -117) [ 149.485290][ T8525] EXT4-fs (loop2): 1 truncate cleaned up [ 149.502619][ T1639] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.503403][ T8529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.513176][ T1639] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.513285][ T1639] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 149.629760][ T8525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.656282][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.673160][ T8542] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 149.802719][ T8542] loop2: detected capacity change from 0 to 764 [ 149.837858][ T8542] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 149.846896][ T8542] Symlink component flag not implemented [ 149.852982][ T8542] Symlink component flag not implemented (7) [ 149.997325][ T8551] syzkaller0: tun_chr_ioctl cmd 35108 [ 150.230945][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.300276][ T8555] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 150.509713][ T8561] loop0: detected capacity change from 0 to 512 [ 150.519845][ T8564] loop2: detected capacity change from 0 to 128 [ 150.529979][ T8561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.707788][ T8561] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1758: inode has both inline data and extents flags [ 150.721887][ T8561] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1758: couldn't read orphan inode 15 (err -117) [ 150.735358][ T8561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.791051][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.897865][ T8571] loop1: detected capacity change from 0 to 2048 [ 150.927470][ T8571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.986060][ T8576] loop0: detected capacity change from 0 to 2048 [ 151.000989][ T8576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 151.036194][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 151.086577][ T8583] loop0: detected capacity change from 0 to 1024 [ 151.098242][ T8583] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 151.183181][ T8571] ================================================================== [ 151.191283][ T8571] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 151.198424][ T8571] [ 151.200738][ T8571] write to 0xffff88811b432a34 of 4 bytes by task 8581 on cpu 0: [ 151.208364][ T8571] xas_set_mark+0x12b/0x140 [ 151.212881][ T8571] __folio_start_writeback+0x155/0x340 [ 151.218352][ T8571] ext4_bio_write_folio+0x5ad/0x9f0 [ 151.223561][ T8571] mpage_process_page_bufs+0x4a1/0x620 [ 151.229031][ T8571] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 151.234840][ T8571] ext4_do_writepages+0x9f6/0x27e0 [ 151.239972][ T8571] ext4_writepages+0x179/0x300 [ 151.244740][ T8571] do_writepages+0x1c6/0x310 [ 151.249335][ T8571] file_write_and_wait_range+0x156/0x2c0 [ 151.254956][ T8571] generic_buffers_fsync_noflush+0x45/0x130 [ 151.260851][ T8571] ext4_sync_file+0x1ab/0x690 [ 151.265528][ T8571] vfs_fsync_range+0x10d/0x130 [ 151.270296][ T8571] ext4_buffered_write_iter+0x34f/0x3c0 [ 151.275834][ T8571] ext4_file_write_iter+0x387/0xf60 [ 151.281035][ T8571] iter_file_splice_write+0x66b/0xa20 [ 151.286400][ T8571] direct_splice_actor+0x156/0x2a0 [ 151.291503][ T8571] splice_direct_to_actor+0x312/0x680 [ 151.296868][ T8571] do_splice_direct+0xda/0x150 [ 151.301629][ T8571] do_sendfile+0x380/0x650 [ 151.306049][ T8571] __x64_sys_sendfile64+0x105/0x150 [ 151.311242][ T8571] x64_sys_call+0x2db1/0x3000 [ 151.315920][ T8571] do_syscall_64+0xd8/0x2a0 [ 151.320423][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.326318][ T8571] [ 151.328632][ T8571] read to 0xffff88811b432a34 of 4 bytes by task 8571 on cpu 1: [ 151.336160][ T8571] xas_find_marked+0x5dc/0x620 [ 151.340939][ T8571] find_get_entry+0x5d/0x380 [ 151.345524][ T8571] filemap_get_folios_tag+0x92/0x210 [ 151.350804][ T8571] mpage_prepare_extent_to_map+0x308/0xc20 [ 151.356614][ T8571] ext4_do_writepages+0x9f6/0x27e0 [ 151.361736][ T8571] ext4_writepages+0x179/0x300 [ 151.366498][ T8571] do_writepages+0x1c6/0x310 [ 151.371098][ T8571] file_write_and_wait_range+0x156/0x2c0 [ 151.376725][ T8571] generic_buffers_fsync_noflush+0x45/0x130 [ 151.382610][ T8571] ext4_sync_file+0x1ab/0x690 [ 151.387281][ T8571] vfs_fsync_range+0x10d/0x130 [ 151.392043][ T8571] ext4_buffered_write_iter+0x34f/0x3c0 [ 151.397582][ T8571] ext4_file_write_iter+0x387/0xf60 [ 151.402797][ T8571] iter_file_splice_write+0x66b/0xa20 [ 151.408166][ T8571] direct_splice_actor+0x156/0x2a0 [ 151.413272][ T8571] splice_direct_to_actor+0x312/0x680 [ 151.418636][ T8571] do_splice_direct+0xda/0x150 [ 151.423399][ T8571] do_sendfile+0x380/0x650 [ 151.427821][ T8571] __x64_sys_sendfile64+0x105/0x150 [ 151.433021][ T8571] x64_sys_call+0x2db1/0x3000 [ 151.437713][ T8571] do_syscall_64+0xd8/0x2a0 [ 151.442225][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.448118][ T8571] [ 151.450429][ T8571] value changed: 0x0a000021 -> 0x04000021 [ 151.456135][ T8571] [ 151.458446][ T8571] Reported by Kernel Concurrency Sanitizer on: [ 151.464598][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.1.1762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.474316][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.484365][ T8571] ================================================================== [ 151.693322][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.