last executing test programs: 2m31.819238991s ago: executing program 2 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503162ed3fc140820004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m31.779834533s ago: executing program 2 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 2m31.726753965s ago: executing program 2 (id=955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x3, 0x24, 0x68, 0x0, 0xff, 0x21, 0x0, @empty, @loopback}, {{0x4e23, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, "e75bbe", 0x4, "49c176"}}}}}}, 0x0) 2m31.659431368s ago: executing program 2 (id=960): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 2m31.610736s ago: executing program 2 (id=963): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = gettid() tkill(r1, 0x21) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={[0x5]}, 0x8) 2m31.461068907s ago: executing program 2 (id=972): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2m31.460805757s ago: executing program 32 (id=972): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2m28.359800611s ago: executing program 5 (id=1050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m26.113158307s ago: executing program 5 (id=1100): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000060000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2m26.080970809s ago: executing program 5 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 2m25.817539331s ago: executing program 5 (id=1107): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x23e78d3, 0xffffffffffffffff, 0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x89901) 2m25.778896962s ago: executing program 5 (id=1108): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 2m25.610453709s ago: executing program 5 (id=1113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x124, 0x2c, 0xd27, 0x70bd20, 0x4, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xf4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xf0, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x671d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xc4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8081}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x10, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x34}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x101}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xa7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m25.560494412s ago: executing program 33 (id=1113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x124, 0x2c, 0xd27, 0x70bd20, 0x4, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xf4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xf0, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x671d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xc4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8081}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x10, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x34}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x101}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xa7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m45.771119377s ago: executing program 0 (id=2479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x7, 0x2, [0x1, 0x6]}, 0xc) 1m45.681980952s ago: executing program 0 (id=2481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m45.630292214s ago: executing program 0 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000c40)='sched_switch\x00', r2, 0x0, 0x8}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x540, 0x0, 0x2b8, 0xb0000010, 0x378, 0x5c8f0200, 0x470, 0x3a8, 0x3a8, 0x470, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0x0, 0x0, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x350, 0x378, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x800000, 0x7fffffff}}}, @common=@inet=@hashlimit2={{0x150}, {'ip6gretap0\x00', {0x9, 0x0, 0x50, 0x7ff, 0x8a, 0x0, 0x9, 0x40, 0x18}, {0x5}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x200, 0x4}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 1m45.549646267s ago: executing program 0 (id=2486): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000000020, 0x8005, 0x0, 0x0, 0x11, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71efdd23dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwrite64(r0, &(0x7f0000000300)="ec", 0x1, 0x8000c61) 1m44.759876302s ago: executing program 0 (id=2501): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, 0x0) removexattr(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m44.045788112s ago: executing program 0 (id=2514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x24008800) 1m43.987776645s ago: executing program 34 (id=2514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x24008800) 1m35.638918135s ago: executing program 7 (id=2797): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000000)={0x4001, 0x7fffffff, 0x2, 0x1}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "53bb"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 1m35.253321212s ago: executing program 7 (id=2808): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m34.699562535s ago: executing program 7 (id=2834): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 1m34.643156948s ago: executing program 7 (id=2838): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m34.614253069s ago: executing program 7 (id=2842): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m34.410081858s ago: executing program 7 (id=2855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00\x00 \x00', "a3f7a0879100"}, 0x38) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1, 0x0) 1m34.36411492s ago: executing program 35 (id=2855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00\x00 \x00', "a3f7a0879100"}, 0x38) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1, 0x0) 1m19.714594671s ago: executing program 4 (id=3349): mkdir(&(0x7f0000000580)='./file0\x00', 0x82) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f00000002c0)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x0) 1m19.595194397s ago: executing program 4 (id=3351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m19.52530792s ago: executing program 4 (id=3353): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) r2 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r2, 0x4) 1m19.466103842s ago: executing program 4 (id=3354): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 1m19.152509166s ago: executing program 4 (id=3365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m18.920948846s ago: executing program 4 (id=3384): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x8000}}, 0x100, 0x0, 0x0, 0x3, 0x54, 0x0, 0x8}, 0x9c) 1m18.884367067s ago: executing program 36 (id=3384): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x8000}}, 0x100, 0x0, 0x0, 0x3, 0x54, 0x0, 0x8}, 0x9c) 2.32752712s ago: executing program 6 (id=6046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 2.080244861s ago: executing program 6 (id=6055): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000680)="d942cf", 0x3, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.016921973s ago: executing program 6 (id=6058): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 2.016658953s ago: executing program 3 (id=6059): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r1, 0x1) flock(r2, 0x1) flock(r0, 0x5) 1.969594705s ago: executing program 6 (id=6062): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.948937236s ago: executing program 6 (id=6063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 1.916789897s ago: executing program 6 (id=6065): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.812611412s ago: executing program 3 (id=6066): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x20008800) 1.810984742s ago: executing program 1 (id=6076): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) lseek(0xffffffffffffffff, 0x9000, 0x3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 1.759773874s ago: executing program 3 (id=6067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 1.658539449s ago: executing program 1 (id=6079): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44014}, 0x0) 1.559596433s ago: executing program 1 (id=6071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cfb40300005fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331602beb7094102d5d409992dcd236e3fd742785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb70100000001000000891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b8356020c014f50000"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 1.464206407s ago: executing program 1 (id=6084): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009001000000001d70000000000000300060000000000020000030000000000000000000000e102000100000000800000020300000000030005000000000002004e23"], 0x60}, 0x1, 0x7}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 1.337635092s ago: executing program 3 (id=6073): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 1.049624705s ago: executing program 9 (id=6075): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x4) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 943.538089ms ago: executing program 9 (id=6080): unshare(0x22020600) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x2}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) 927.6366ms ago: executing program 8 (id=6081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 891.239512ms ago: executing program 9 (id=6082): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4108, 0x100c}], &(0x7f0000000200), 0x1}, 0x20) 886.642402ms ago: executing program 8 (id=6083): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 851.191453ms ago: executing program 8 (id=6085): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 850.852143ms ago: executing program 9 (id=6086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f00000002c0), 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x1000000, 0x27dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0) 813.237695ms ago: executing program 8 (id=6087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7f}, 0x18) mknod$loop(0x0, 0x6000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 806.368776ms ago: executing program 9 (id=6088): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 533.700957ms ago: executing program 9 (id=6089): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x40000040, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) 530.274267ms ago: executing program 8 (id=6099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}}, 0x24}}, 0x4040004) 473.55273ms ago: executing program 3 (id=6090): perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 93.759876ms ago: executing program 1 (id=6091): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 38.259538ms ago: executing program 3 (id=6092): open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x92) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x15b1, 0xd081, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 37.684229ms ago: executing program 8 (id=6103): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) 0s ago: executing program 1 (id=6093): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) utimensat(r0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)={{0x77359400}}, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) kernel console output (not intermixed with test programs): 52: inode #12: comm syz.4.3032: directory missing '..' [ 136.101072][T10801] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 136.133167][T10805] pim6reg: entered allmulticast mode [ 136.142247][T10805] pim6reg: left allmulticast mode [ 136.155982][T10808] bridge_slave_1: left allmulticast mode [ 136.161693][T10808] bridge_slave_1: left promiscuous mode [ 136.167599][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.175832][T10808] bridge_slave_0: left allmulticast mode [ 136.181550][T10808] bridge_slave_0: left promiscuous mode [ 136.187428][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.449608][T10828] loop8: detected capacity change from 0 to 8192 [ 136.659834][T10852] loop6: detected capacity change from 0 to 1024 [ 136.685917][T10852] EXT4-fs: dax option not supported [ 136.810986][T10391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.846004][T10877] loop4: detected capacity change from 0 to 128 [ 136.862333][T10877] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.885280][T10877] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.923601][T10879] loop6: detected capacity change from 0 to 8192 [ 137.013438][T10391] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.099142][T10893] loop8: detected capacity change from 0 to 256 [ 137.105842][T10894] dummy0: entered promiscuous mode [ 137.112387][T10893] FAT-fs (loop8): bogus number of FAT sectors [ 137.118560][T10893] FAT-fs (loop8): Can't find a valid FAT filesystem [ 137.126544][T10894] dummy0 (unregistering): left promiscuous mode [ 137.320023][T10925] loop8: detected capacity change from 0 to 512 [ 137.326943][T10925] EXT4-fs: Ignoring removed i_version option [ 137.332963][T10925] EXT4-fs: Ignoring removed bh option [ 137.346673][T10925] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.363357][T10925] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.392179][T10935] dummy0: entered promiscuous mode [ 137.399878][T10309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.412378][T10935] dummy0 (unregistering): left promiscuous mode [ 137.431099][T10939] loop8: detected capacity change from 0 to 512 [ 137.437949][T10939] EXT4-fs: Ignoring removed oldalloc option [ 137.447824][T10939] EXT4-fs (loop8): 1 truncate cleaned up [ 137.454101][T10939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.489783][T10309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.503992][T10946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.532709][T10950] bridge_slave_1: left allmulticast mode [ 137.538472][T10950] bridge_slave_1: left promiscuous mode [ 137.544175][T10950] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.552078][T10952] netlink: '+}[@': attribute type 10 has an invalid length. [ 137.560324][T10950] bridge_slave_0: left allmulticast mode [ 137.566065][T10950] bridge_slave_0: left promiscuous mode [ 137.571875][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.647323][T10952] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 137.663449][T10959] IPVS: Error connecting to the multicast addr [ 137.848153][T10979] loop8: detected capacity change from 0 to 136 [ 137.984189][T10990] __nla_validate_parse: 13 callbacks suppressed [ 137.984210][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3115'. [ 137.999580][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3115'. [ 138.010755][T10992] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.3116'. [ 138.021133][T10992] netlink: zone id is out of range [ 138.026313][T10992] netlink: zone id is out of range [ 138.032368][T10992] netlink: zone id is out of range [ 138.039356][T10992] netlink: zone id is out of range [ 138.061383][T10992] netlink: set zone limit has 8 unknown bytes [ 138.187559][T11008] ALSA: seq fatal error: cannot create timer (-19) [ 138.240467][T11016] loop4: detected capacity change from 0 to 128 [ 138.255446][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3124'. [ 138.453864][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3131'. [ 138.531575][T11039] loop4: detected capacity change from 0 to 512 [ 138.538994][T11039] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.547756][T11039] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.593307][T11046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3136'. [ 138.602701][T11046] IPVS: Unknown mcast interface: [ 138.608770][T11039] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3133: Allocating blocks 41-42 which overlap fs metadata [ 138.625585][T11039] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3133: Failed to acquire dquot type 1 [ 138.638594][T11039] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 138.660157][T11039] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #12: comm syz.4.3133: corrupted inode contents [ 138.672766][T11039] EXT4-fs error (device loop4): ext4_dirty_inode:6513: inode #12: comm syz.4.3133: mark_inode_dirty error [ 138.684604][T11039] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #12: comm syz.4.3133: corrupted inode contents [ 138.697523][T11039] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.3133: mark_inode_dirty error [ 138.709685][T11039] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #12: comm syz.4.3133: corrupted inode contents [ 138.721808][T11039] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 138.730533][T11039] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #12: comm syz.4.3133: corrupted inode contents [ 138.742822][T11039] EXT4-fs error (device loop4): ext4_truncate:4633: inode #12: comm syz.4.3133: mark_inode_dirty error [ 138.765010][T11039] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 138.774357][T11039] EXT4-fs (loop4): 1 truncate cleaned up [ 138.780869][T11039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.993979][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 138.994053][ T29] audit: type=1400 audit(1764631362.852:3505): avc: denied { mounton } for pid=11073 comm="wg1" path="/51/file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.119147][ T29] audit: type=1400 audit(1764631362.982:3506): avc: denied { bind } for pid=11081 comm="syz.3.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.138870][ T29] audit: type=1400 audit(1764631362.982:3507): avc: denied { node_bind } for pid=11081 comm="syz.3.3149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 139.177421][T11039] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.182061][ T29] audit: type=1400 audit(1764631363.042:3508): avc: denied { create } for pid=11087 comm="syz.1.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.212213][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3152'. [ 139.224496][T11089] loop8: detected capacity change from 0 to 512 [ 139.231372][T11089] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.237919][ T29] audit: type=1400 audit(1764631363.072:3509): avc: denied { write } for pid=11087 comm="syz.1.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.258320][ T29] audit: type=1400 audit(1764631363.072:3510): avc: denied { nlmsg_read } for pid=11087 comm="syz.1.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.294251][T11089] EXT4-fs error (device loop8): ext4_iget_extra_inode:5071: inode #15: comm syz.8.3151: corrupted in-inode xattr: invalid ea_ino [ 139.308116][T11089] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3151: couldn't read orphan inode 15 (err -117) [ 139.321624][T11089] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.344483][ T29] audit: type=1400 audit(1764631363.202:3511): avc: denied { rmdir } for pid=11084 comm="syz.8.3151" name="control" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.367972][T10391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.378427][T10309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.438710][ T29] audit: type=1400 audit(1764631363.302:3512): avc: denied { name_connect } for pid=11100 comm="syz.4.3154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 139.534531][T11111] netlink: '+}[@': attribute type 10 has an invalid length. [ 139.541968][T11111] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 139.594123][T11111] batman_adv: batadv0: Adding interface: veth1_vlan [ 139.600971][T11111] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.674492][T11111] batman_adv: batadv0: Interface activated: veth1_vlan [ 139.720785][ T29] audit: type=1400 audit(1764631363.582:3513): avc: denied { map } for pid=11116 comm="syz.6.3161" path="socket:[31163]" dev="sockfs" ino=31163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 139.819595][T11129] loop8: detected capacity change from 0 to 512 [ 139.835018][ T29] audit: type=1400 audit(1764631363.682:3514): avc: denied { read } for pid=11125 comm="syz.4.3166" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.866999][T11129] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.875877][T11129] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.911616][T11129] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.3165: Allocating blocks 41-42 which overlap fs metadata [ 139.926917][T11139] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3171'. [ 139.935660][T11129] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.3165: Allocating blocks 41-42 which overlap fs metadata [ 139.950121][T11129] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3165: Failed to acquire dquot type 1 [ 139.961766][T11129] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 139.976778][T11129] EXT4-fs error (device loop8): ext4_do_update_inode:5628: inode #12: comm syz.8.3165: corrupted inode contents [ 139.988948][T11129] EXT4-fs error (device loop8): ext4_dirty_inode:6513: inode #12: comm syz.8.3165: mark_inode_dirty error [ 140.010490][T11129] EXT4-fs error (device loop8): ext4_do_update_inode:5628: inode #12: comm syz.8.3165: corrupted inode contents [ 140.024671][T11129] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.3165: mark_inode_dirty error [ 140.039697][T11129] EXT4-fs error (device loop8): ext4_do_update_inode:5628: inode #12: comm syz.8.3165: corrupted inode contents [ 140.055347][T11129] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 140.071392][T11129] EXT4-fs error (device loop8): ext4_do_update_inode:5628: inode #12: comm syz.8.3165: corrupted inode contents [ 140.106407][T11129] EXT4-fs error (device loop8): ext4_truncate:4633: inode #12: comm syz.8.3165: mark_inode_dirty error [ 140.118374][T11129] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 140.136717][T11129] EXT4-fs (loop8): 1 truncate cleaned up [ 140.144393][T11141] SELinux: failed to load policy [ 140.150479][T11129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.269333][T11161] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 140.371003][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3184'. [ 140.382208][T11169] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 140.389933][T11171] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.543530][T10309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.733343][T11195] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 140.906560][T11229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11229 comm=syz.4.3209 [ 140.919221][T11229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11229 comm=syz.4.3209 [ 140.937578][T11228] loop8: detected capacity change from 0 to 2048 [ 140.975548][T11228] loop8: p1 < > p4 [ 140.980434][T11228] loop8: p4 size 8388608 extends beyond EOD, truncated [ 141.114094][T11244] SELinux: failed to load policy [ 141.412453][T11276] vlan2: entered allmulticast mode [ 141.853997][T11331] loop6: detected capacity change from 0 to 512 [ 141.906108][T11331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.964569][ T6195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.101988][T11349] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.129341][T11349] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 142.468832][T11367] vlan2: entered allmulticast mode [ 142.837288][T11385] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 143.392136][T11431] __nla_validate_parse: 12 callbacks suppressed [ 143.392229][T11431] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3301'. [ 143.469683][T11439] netlink: 'syz.4.3305': attribute type 12 has an invalid length. [ 143.659287][T11449] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3310'. [ 143.785119][T11458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3314'. [ 143.827674][T11461] geneve2: entered promiscuous mode [ 143.833126][T11461] geneve2: entered allmulticast mode [ 144.006837][T11477] SELinux: security_context_str_to_sid (à¥/\Þ7{0$§Y[T̨) failed with errno=-22 [ 144.163786][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 144.163802][ T29] audit: type=1400 audit(1764631368.022:3687): avc: denied { append } for pid=11483 comm="syz.6.3326" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 144.193658][ T29] audit: type=1400 audit(1764631368.022:3688): avc: denied { open } for pid=11483 comm="syz.6.3326" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 144.217411][ T29] audit: type=1400 audit(1764631368.022:3689): avc: denied { ioctl } for pid=11483 comm="syz.6.3326" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 144.290724][T11490] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3329'. [ 144.338700][T11492] netlink: 'syz.6.3330': attribute type 3 has an invalid length. [ 144.346533][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3330'. [ 144.617591][T11518] netlink: 'syz.1.3341': attribute type 1 has an invalid length. [ 144.622401][T11516] lo speed is unknown, defaulting to 1000 [ 144.637820][T11518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.648264][ T29] audit: type=1400 audit(1764631368.512:3690): avc: denied { create } for pid=11517 comm="syz.3.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 144.668245][ T29] audit: type=1400 audit(1764631368.512:3691): avc: denied { sys_admin } for pid=11517 comm="syz.3.3342" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 144.797625][T11523] bond1: (slave gretap1): making interface the new active one [ 144.807137][T11523] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 144.875113][ T29] audit: type=1400 audit(1764631368.512:3692): avc: denied { associate } for pid=11521 comm="syz.3.3342" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 144.916805][T11529] gtp0: entered promiscuous mode [ 145.035687][T11537] netlink: 'syz.8.3348': attribute type 2 has an invalid length. [ 145.043550][T11537] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3348'. [ 145.069806][T11540] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 145.079894][ T29] audit: type=1400 audit(1764631368.952:3693): avc: denied { relabelto } for pid=11539 comm="syz.4.3349" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 145.106837][ T29] audit: type=1400 audit(1764631368.952:3694): avc: denied { associate } for pid=11539 comm="syz.4.3349" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_exec_t:s0" [ 145.198481][ T29] audit: type=1400 audit(1764631369.032:3695): avc: denied { unmount } for pid=10391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 145.247684][T11546] pimreg: entered allmulticast mode [ 145.281108][T11546] pimreg: left allmulticast mode [ 145.312228][T11551] loop4: detected capacity change from 0 to 512 [ 145.337993][T11551] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3354: inode has both inline data and extents flags [ 145.382296][ T29] audit: type=1400 audit(1764631369.242:3696): avc: denied { setopt } for pid=11556 comm="syz.6.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.426995][T11559] geneve2: entered promiscuous mode [ 145.432262][T11559] geneve2: entered allmulticast mode [ 145.446422][T11551] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3354: couldn't read orphan inode 15 (err -117) [ 145.471446][T11551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.505810][T11562] pimreg: entered allmulticast mode [ 145.534502][T11562] pimreg: left allmulticast mode [ 145.575391][T11551] loop4: detected capacity change from 512 to 64 [ 145.596901][T11571] loop8: detected capacity change from 0 to 512 [ 145.615929][T10391] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 145.630573][T11571] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 145.654039][T10391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.848795][T11591] netlink: 'syz.6.3373': attribute type 1 has an invalid length. [ 145.870801][T11591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.899418][ T5553] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.944153][T11591] bond2: (slave gretap1): making interface the new active one [ 145.953360][T11591] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 145.987413][ T5553] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.088677][ T5553] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.135456][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.164377][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.179805][ T5553] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.194367][T11598] lo speed is unknown, defaulting to 1000 [ 146.286320][ T5553] bridge_slave_1: left allmulticast mode [ 146.292007][ T5553] bridge_slave_1: left promiscuous mode [ 146.297822][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.306639][ T5553] bridge_slave_0: left allmulticast mode [ 146.312318][ T5553] bridge_slave_0: left promiscuous mode [ 146.318254][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.467471][ T5553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.478312][ T5553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.488300][ T5553] bond0 (unregistering): Released all slaves [ 146.505103][T11598] chnl_net:caif_netlink_parms(): no params data found [ 146.552250][ T5553] hsr_slave_0: left promiscuous mode [ 146.558013][ T5553] hsr_slave_1: left promiscuous mode [ 146.563576][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.571048][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.578735][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.586171][ T5553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.593755][ T5553] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 146.600944][ T5553] batman_adv: batadv0: Removing interface: veth1_vlan [ 146.610083][ T5553] veth1_macvtap: left promiscuous mode [ 146.615656][ T5553] veth0_macvtap: left promiscuous mode [ 146.621134][ T5553] veth1_vlan: left promiscuous mode [ 146.626476][ T5553] veth0_vlan: left promiscuous mode [ 146.698584][ T5553] team0 (unregistering): Port device team_slave_1 removed [ 146.708695][ T5553] team0 (unregistering): Port device team_slave_0 removed [ 146.867365][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.885303][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.948735][T11598] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.955930][T11598] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.979950][T11598] bridge_slave_0: entered allmulticast mode [ 146.993902][T11598] bridge_slave_0: entered promiscuous mode [ 147.016169][ T5552] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.025132][ T5552] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.052527][T11598] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.059679][T11598] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.115534][T11598] bridge_slave_1: entered allmulticast mode [ 147.134456][T11598] bridge_slave_1: entered promiscuous mode [ 147.150696][ T5552] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.159770][ T5552] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.175620][T11649] geneve2: entered promiscuous mode [ 147.180939][T11649] geneve2: entered allmulticast mode [ 147.223995][T11598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.233232][ T5552] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.242250][ T5552] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.254311][T11598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.263663][ T5552] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.272642][ T5552] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.296479][T11662] lo speed is unknown, defaulting to 1000 [ 147.348336][T11598] team0: Port device team_slave_0 added [ 147.357068][T11598] team0: Port device team_slave_1 added [ 147.378216][T11670] pimreg: entered allmulticast mode [ 147.402778][T11675] loop6: detected capacity change from 0 to 164 [ 147.411015][T11675] rock: directory entry would overflow storage [ 147.417230][T11675] rock: sig=0x4f50, size=4, remaining=3 [ 147.422793][T11675] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.431529][T11670] pimreg: left allmulticast mode [ 147.445532][T11598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.452537][T11598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.478626][T11598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.490771][T11598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.497887][T11598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.523844][T11598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.604528][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.611796][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.676020][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3408'. [ 147.684943][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3408'. [ 147.713954][T11598] hsr_slave_0: entered promiscuous mode [ 147.728086][T11598] hsr_slave_1: entered promiscuous mode [ 147.734520][T11598] debugfs: 'hsr0' already exists in 'hsr' [ 147.740476][T11598] Cannot create hsr debugfs directory [ 147.747626][ T5578] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.756769][ T5578] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.768667][T11697] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3409'. [ 147.823230][ T5578] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.832242][ T5578] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.895582][ T5578] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.904624][ T5578] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.921730][ T5578] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.930791][ T5578] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.947796][T11716] netlink: 'syz.8.3416': attribute type 1 has an invalid length. [ 147.985966][T11716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.055538][T11716] bond2: (slave gretap1): making interface the new active one [ 148.064050][T11716] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 148.078776][T11598] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 148.110014][T11598] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 148.128563][T11598] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 148.145230][T11732] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3421'. [ 148.162187][T11598] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 148.225200][T11743] veth1_to_bond: Caught tx_queue_len zero misconfig [ 148.270262][T11598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.291379][T11598] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.310941][ T5563] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.318117][ T5563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.352210][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.359330][ T5553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.432845][T11598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.477636][T11598] veth0_vlan: entered promiscuous mode [ 148.491054][T11598] veth1_vlan: entered promiscuous mode [ 148.509509][T11598] veth0_macvtap: entered promiscuous mode [ 148.517628][T11598] veth1_macvtap: entered promiscuous mode [ 148.555731][T11598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.571494][T11598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.587452][ T5575] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.609769][ T5575] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.620219][ T5553] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.640049][ T5553] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.668095][T11792] __nla_validate_parse: 1 callbacks suppressed [ 148.668161][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'. [ 148.870095][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.877367][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.891676][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3450'. [ 148.901092][T11819] unsupported nla_type 24929 [ 148.937950][T11816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.948520][T11816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.960099][T11826] loop8: detected capacity change from 0 to 512 [ 148.967990][T11826] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 148.979999][T11826] EXT4-fs (loop8): 1 orphan inode deleted [ 148.985972][T11826] EXT4-fs (loop8): 1 truncate cleaned up [ 148.992525][T11826] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.020588][ T5575] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.020997][T10309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.039328][ T5575] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.048335][ T5575] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.058251][ T5575] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.110757][T11831] loop9: detected capacity change from 0 to 2048 [ 149.166930][T11831] loop9: p1 < > p4 [ 149.175146][T11831] loop9: p4 size 8388608 extends beyond EOD, truncated [ 149.193575][T11846] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3460'. [ 149.224388][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 149.224405][ T29] audit: type=1326 audit(1764631373.082:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 149.266936][ T29] audit: type=1326 audit(1764631373.082:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 149.290554][ T29] audit: type=1326 audit(1764631373.082:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 149.314186][ T29] audit: type=1326 audit(1764631373.082:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 149.338154][ T29] audit: type=1326 audit(1764631373.092:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 149.361932][ T29] audit: type=1326 audit(1764631373.092:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 149.385637][ T29] audit: type=1326 audit(1764631373.092:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 149.409235][ T29] audit: type=1326 audit(1764631373.092:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 149.464101][ T29] audit: type=1326 audit(1764631373.322:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 149.488070][ T29] audit: type=1326 audit(1764631373.322:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 149.673751][T11872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.682144][T11872] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.693236][T11872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.711279][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'. [ 149.824662][T11885] lo speed is unknown, defaulting to 1000 [ 149.965854][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3483'. [ 150.094499][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3486'. [ 150.103608][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3486'. [ 150.426868][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3500'. [ 150.486463][T11942] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 150.823153][T11956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3508'. [ 150.892559][T11962] lo speed is unknown, defaulting to 1000 [ 150.911062][T11964] netlink: 'syz.3.3512': attribute type 1 has an invalid length. [ 150.957433][T11964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.988090][T11964] bond1: (slave gretap1): making interface the new active one [ 151.025944][T11964] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 151.044409][T11968] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3513'. [ 151.166941][T11976] loop6: detected capacity change from 0 to 512 [ 151.196672][T11976] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 151.263771][T11976] EXT4-fs (loop6): 1 orphan inode deleted [ 151.269621][T11976] EXT4-fs (loop6): 1 truncate cleaned up [ 151.295586][T11976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.328831][T11991] loop8: detected capacity change from 0 to 1024 [ 151.355903][T11991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.368211][T11991] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.381643][T11991] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: comm syz.8.3522: lblock 0 mapped to illegal pblock 0 (length 1) [ 151.395782][T11991] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 151.408178][T11991] EXT4-fs (loop8): This should not happen!! Data will be lost [ 151.408178][T11991] [ 151.436957][ T6195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.447417][T10309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.506399][T12010] netlink: 'syz.9.3526': attribute type 1 has an invalid length. [ 151.526453][T12017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12017 comm=syz.8.3530 [ 151.539058][T12017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12017 comm=syz.8.3530 [ 151.611440][T12030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12030 comm=syz.6.3537 [ 151.625649][T12030] netlink: 'syz.6.3537': attribute type 1 has an invalid length. [ 151.661657][T12030] bond3: (slave bridge1): making interface the new active one [ 151.669678][T12030] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 152.489497][T12103] lo speed is unknown, defaulting to 1000 [ 152.662451][ T5607] Bluetooth: hci0: Frame reassembly failed (-84) [ 153.162120][T12162] gretap0: left promiscuous mode [ 153.197800][T12162] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.222154][T12162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.460257][T12189] netlink: 'syz.6.3603': attribute type 1 has an invalid length. [ 153.477233][T12189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.485851][T12189] bond4: (slave batadv0): making interface the new active one [ 153.494773][T12189] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 153.515233][T12189] bond4 (unregistering): (slave batadv0): Releasing active interface [ 153.526827][T12189] bond4 (unregistering): Released all slaves [ 153.750940][T12228] __nla_validate_parse: 16 callbacks suppressed [ 153.750962][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'. [ 153.771883][T12228] erspan0: entered promiscuous mode [ 153.777864][T12228] macvtap1: entered promiscuous mode [ 153.783421][T12228] macvtap1: entered allmulticast mode [ 153.789007][T12228] erspan0: entered allmulticast mode [ 153.798958][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 153.836712][T12231] uprobe: syz.1.3619:12231 failed to unregister, leaking uprobe [ 154.031293][T12250] loop6: detected capacity change from 0 to 512 [ 154.038239][T12250] EXT4-fs: Ignoring removed i_version option [ 154.044272][T12250] EXT4-fs: Ignoring removed bh option [ 154.056722][T12250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.070212][T12250] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.134488][ T6195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.337631][T12276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.341395][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3638'. [ 154.491738][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 154.491753][ T29] audit: type=1400 audit(1764631378.352:3950): avc: denied { map } for pid=12297 comm="syz.1.3646" path="pipe:[35066]" dev="pipefs" ino=35066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 154.553883][T12302] loop6: detected capacity change from 0 to 1024 [ 154.560890][T12302] EXT4-fs: Ignoring removed bh option [ 154.578442][T12302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.593588][T12302] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.3648: Allocating blocks 385-513 which overlap fs metadata [ 154.607754][ T29] audit: type=1326 audit(1764631378.452:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.3.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 154.631388][ T29] audit: type=1326 audit(1764631378.452:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.3.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 154.655164][ T29] audit: type=1326 audit(1764631378.452:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.3.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 154.656534][T12302] EXT4-fs (loop6): pa ffff8881042c9690: logic 16, phys. 129, len 24 [ 154.678847][ T29] audit: type=1326 audit(1764631378.452:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.3.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 154.686799][T12302] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 154.721097][ T6712] Bluetooth: hci0: command 0x1003 tx timeout [ 154.721924][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.727196][ T29] audit: type=1326 audit(1764631378.522:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.3.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 154.756966][ T29] audit: type=1326 audit(1764631378.522:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.3.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 154.780502][ T29] audit: type=1400 audit(1764631378.522:3957): avc: denied { map } for pid=12301 comm="syz.6.3648" path="/505/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.803576][ T29] audit: type=1400 audit(1764631378.522:3958): avc: denied { append } for pid=12301 comm="syz.6.3648" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.825972][ T29] audit: type=1326 audit(1764631378.562:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12312 comm="syz.8.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 154.888720][ T6195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.157274][T12340] loop9: detected capacity change from 0 to 512 [ 155.168690][T12340] EXT4-fs: Mount option(s) incompatible with ext3 [ 155.228288][T12349] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3664'. [ 155.245037][T12342] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3664'. [ 155.316000][T12360] netlink: 'syz.9.3671': attribute type 1 has an invalid length. [ 155.445166][T12374] bridge0: entered promiscuous mode [ 155.547088][T12390] ipip0: entered promiscuous mode [ 155.897014][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3699'. [ 155.914152][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3699'. [ 156.047967][T12436] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 156.452699][T12445] netlink: 'syz.3.3709': attribute type 1 has an invalid length. [ 156.536760][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3707'. [ 156.547344][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3709'. [ 156.769690][T12446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.793979][T12446] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.023069][T12446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.049183][T12463] uprobe: syz.8.3714:12463 failed to unregister, leaking uprobe [ 157.051918][T12445] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 157.066729][T12445] bond2: (slave batadv1): making interface the new active one [ 157.077618][T12445] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 157.098620][T12451] bond2 (unregistering): (slave batadv1): Releasing active interface [ 157.107909][T12451] bond2 (unregistering): Released all slaves [ 157.203955][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3720'. [ 158.559804][T12561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.572785][T12561] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.596883][T12561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.880903][T12600] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 158.957160][T12612] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 158.971720][T12610] rdma_op ffff888118c3d980 conn xmit_rdma 0000000000000000 [ 158.972026][T12614] 9pnet_fd: Insufficient options for proto=fd [ 159.042982][T12617] lo speed is unknown, defaulting to 1000 [ 159.111972][T12631] __nla_validate_parse: 7 callbacks suppressed [ 159.111988][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3788'. [ 159.150994][T12634] loop6: detected capacity change from 0 to 512 [ 159.207186][T12642] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3793'. [ 159.235568][T12634] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3789: Failed to acquire dquot type 1 [ 159.263064][T12634] EXT4-fs error (device loop6): ext4_do_update_inode:5628: inode #16: comm syz.6.3789: corrupted inode contents [ 159.276020][T12634] EXT4-fs error (device loop6): ext4_dirty_inode:6513: inode #16: comm syz.6.3789: mark_inode_dirty error [ 159.291280][T12634] EXT4-fs error (device loop6): ext4_do_update_inode:5628: inode #16: comm syz.6.3789: corrupted inode contents [ 159.305005][T12634] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3789: mark_inode_dirty error [ 159.325733][T12634] EXT4-fs error (device loop6): ext4_do_update_inode:5628: inode #16: comm syz.6.3789: corrupted inode contents [ 159.342606][T12634] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 159.358412][T12634] EXT4-fs error (device loop6): ext4_do_update_inode:5628: inode #16: comm syz.6.3789: corrupted inode contents [ 159.372375][T12634] EXT4-fs error (device loop6): ext4_truncate:4633: inode #16: comm syz.6.3789: mark_inode_dirty error [ 159.385605][T12634] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 159.412359][T12634] EXT4-fs (loop6): 1 truncate cleaned up [ 159.429174][T12634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.442453][T12634] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.454890][T12634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.568821][T12673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.590923][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3805'. [ 159.766658][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 159.766678][ T29] audit: type=1326 audit(1764631383.632:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 159.818925][ T29] audit: type=1326 audit(1764631383.632:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 159.842534][ T29] audit: type=1326 audit(1764631383.672:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 159.866288][ T29] audit: type=1326 audit(1764631383.672:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 159.889855][ T29] audit: type=1326 audit(1764631383.672:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 159.913448][ T29] audit: type=1326 audit(1764631383.672:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 159.937065][ T29] audit: type=1326 audit(1764631383.672:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 159.960629][ T29] audit: type=1326 audit(1764631383.672:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 159.984198][ T29] audit: type=1326 audit(1764631383.672:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 160.007758][ T29] audit: type=1326 audit(1764631383.672:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.3.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 160.110553][T12711] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.144955][T12713] vlan3: entered allmulticast mode [ 160.155268][T12713] dummy0: entered allmulticast mode [ 160.178355][T12711] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.258049][T12711] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.318133][T12711] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.392402][ T5578] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.405041][ T5578] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.435484][ T5578] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.469213][ T5578] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.529743][T12732] netlink: 'syz.6.3828': attribute type 39 has an invalid length. [ 160.545440][T12733] IPv6: Can't replace route, no match found [ 160.575524][T12735] ref_ctr_offset mismatch. inode: 0xf98 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 160.680916][ T5607] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.869335][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3850'. [ 161.057972][T12799] netlink: 'syz.3.3859': attribute type 21 has an invalid length. [ 161.090731][T12803] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3861'. [ 161.102793][T12803] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3861'. [ 161.245392][T12815] ref_ctr_offset mismatch. inode: 0xfef offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 161.540690][T12848] loop6: detected capacity change from 0 to 512 [ 161.547474][T12848] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.620828][T12850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3881'. [ 161.825750][T12867] loop6: detected capacity change from 0 to 128 [ 161.829203][T12865] netlink: 'syz.9.3889': attribute type 39 has an invalid length. [ 161.832612][T12867] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.852182][T12867] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.883688][ T5553] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.922911][T12878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3895'. [ 161.993742][T12890] loop9: detected capacity change from 0 to 1024 [ 162.000622][T12890] EXT4-fs: Ignoring removed orlov option [ 162.008857][T12890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.094734][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 162.102241][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.109714][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.117139][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.124601][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.132050][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.139676][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.147129][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 162.154536][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.161972][ T4942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.175084][ T4942] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 162.243842][T11598] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.246577][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3914'. [ 162.261816][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3914'. [ 162.280036][T12902] loop9: detected capacity change from 0 to 128 [ 162.287138][T12902] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.299345][T12902] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.332811][ T5607] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.695161][ T6712] Bluetooth: hci0: command 0x1003 tx timeout [ 162.701252][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.774513][T12942] loop8: detected capacity change from 0 to 512 [ 162.782720][T12942] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 162.790742][T12942] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 162.799055][T12942] EXT4-fs (loop8): orphan cleanup on readonly fs [ 162.805693][T12942] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 162.820333][T12942] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 162.827675][T12942] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3921: bg 0: block 40: padding at end of block bitmap is not set [ 162.842329][T12942] EXT4-fs (loop8): Remounting filesystem read-only [ 162.848916][T12942] EXT4-fs (loop8): 1 truncate cleaned up [ 162.854924][T12942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.868992][T12942] EXT4-fs (loop8): shut down requested (0) [ 162.875957][T12942] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=16 [ 162.884872][T12942] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=16 [ 162.894286][T12942] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=16 [ 162.913942][T10309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.976038][T12955] loop8: detected capacity change from 0 to 512 [ 162.987350][T12955] EXT4-fs (loop8): too many log groups per flexible block group [ 162.995231][T12955] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 163.002107][T12955] EXT4-fs (loop8): mount failed [ 163.068849][T12967] lo speed is unknown, defaulting to 1000 [ 163.164474][T12972] netlink: 'syz.8.3934': attribute type 13 has an invalid length. [ 163.705804][T13004] bond0: (slave dummy0): Releasing backup interface [ 163.727396][T13004] bridge_slave_0: left promiscuous mode [ 163.733207][T13004] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.765196][T13007] netlink: 'syz.6.3942': attribute type 10 has an invalid length. [ 163.776635][T13004] bridge_slave_1: left allmulticast mode [ 163.782310][T13004] bridge_slave_1: left promiscuous mode [ 163.788045][T13004] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.966602][T13004] bond0: (slave bond_slave_0): Releasing backup interface [ 163.977374][T13004] bond0: (slave bond_slave_1): Releasing backup interface [ 163.987503][T13004] team0: Port device team_slave_0 removed [ 163.994561][T13004] team0: Port device team_slave_1 removed [ 164.009869][T13004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.115220][T13007] veth1_vlan: left promiscuous mode [ 164.121699][T13007] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 164.227103][T13019] __nla_validate_parse: 2 callbacks suppressed [ 164.227119][T13019] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3952'. [ 164.352903][T13040] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3962'. [ 164.554926][T13063] ref_ctr_offset mismatch. inode: 0xb9b offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 164.662175][T13074] bond3: entered promiscuous mode [ 164.667467][T13074] bond3: entered allmulticast mode [ 164.696864][T13074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.718571][T13074] bond3 (unregistering): Released all slaves [ 164.757227][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3982'. [ 164.801284][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3982'. [ 164.837582][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 164.837611][ T29] audit: type=1326 audit(1764631388.702:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.8.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 164.867370][ T29] audit: type=1326 audit(1764631388.702:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.8.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 164.903544][ T29] audit: type=1326 audit(1764631388.762:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.8.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 164.927181][ T29] audit: type=1326 audit(1764631388.762:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.8.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 164.951018][ T29] audit: type=1326 audit(1764631388.762:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.8.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 164.986464][ T29] audit: type=1326 audit(1764631388.802:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.9.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 165.010060][ T29] audit: type=1326 audit(1764631388.802:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.9.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 165.033899][ T29] audit: type=1326 audit(1764631388.802:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.9.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 165.057535][ T29] audit: type=1326 audit(1764631388.802:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.9.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 165.081348][ T29] audit: type=1326 audit(1764631388.802:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13089 comm="syz.9.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 165.189371][T13108] loop9: detected capacity change from 0 to 512 [ 165.224801][T13108] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 165.232856][T13108] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 165.284095][T13108] EXT4-fs (loop9): orphan cleanup on readonly fs [ 165.310462][T13108] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 165.325075][T13108] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 165.333769][T13108] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3994: bg 0: block 40: padding at end of block bitmap is not set [ 165.348300][T13108] EXT4-fs (loop9): Remounting filesystem read-only [ 165.355046][T13108] EXT4-fs (loop9): 1 truncate cleaned up [ 165.361235][T13108] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.377469][T13108] EXT4-fs (loop9): shut down requested (0) [ 165.383831][T13126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4002'. [ 165.392953][T13126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4002'. [ 165.402283][T13108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=16 [ 165.421269][T13108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=16 [ 165.435522][T13130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=16 [ 165.476957][T11598] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.756569][T13155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4013'. [ 166.049099][T13189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4026'. [ 166.096753][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4029'. [ 166.105820][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4029'. [ 166.141680][T13198] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.176020][T13202] loop6: detected capacity change from 0 to 512 [ 166.185948][T13202] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 166.193886][T13202] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 166.209545][T13202] EXT4-fs (loop6): orphan cleanup on readonly fs [ 166.216350][T13202] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 166.231053][T13202] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 166.245236][T13202] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4033: bg 0: block 40: padding at end of block bitmap is not set [ 166.260613][T13202] EXT4-fs (loop6): Remounting filesystem read-only [ 166.267707][T13202] EXT4-fs (loop6): 1 truncate cleaned up [ 166.274081][T13202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.289678][T13202] EXT4-fs (loop6): shut down requested (0) [ 166.299048][T13202] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=16 [ 166.308674][T13202] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=16 [ 166.325780][T13202] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=16 [ 166.372484][ T6195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.442763][T13226] loop9: detected capacity change from 0 to 128 [ 166.508468][T13232] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 166.508468][T13232] program syz.9.4054 not setting count and/or reply_len properly [ 166.604726][T13240] lo speed is unknown, defaulting to 1000 [ 167.545353][T13302] bond_slave_0: Caught tx_queue_len zero misconfig [ 167.808342][T13319] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 167.914715][T13337] loop6: detected capacity change from 0 to 256 [ 167.925598][T13337] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.975630][T13337] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.256462][T13364] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.270013][T13364] vhci_hcd: invalid port number 96 [ 168.275248][T13364] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 168.525878][T13399] netlink: 'syz.3.4118': attribute type 1 has an invalid length. [ 168.541073][T13398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.566265][T13398] bond3: option all_slaves_active: invalid value (4) [ 168.591934][T13399] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 168.603170][T13399] bond2: (slave batadv2): making interface the new active one [ 168.612231][T13399] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 168.630802][T13399] bond2 (unregistering): (slave batadv2): Releasing active interface [ 168.640072][T13399] bond2 (unregistering): Released all slaves [ 168.901392][T13454] bridge0: port 1(vlan2) entered blocking state [ 168.907790][T13454] bridge0: port 1(vlan2) entered disabled state [ 168.917089][T13454] vlan2: entered allmulticast mode [ 168.922705][T13454] bridge0: entered allmulticast mode [ 168.928823][T13454] vlan2: left allmulticast mode [ 168.933780][T13454] bridge0: left allmulticast mode [ 169.242258][T13487] __nla_validate_parse: 14 callbacks suppressed [ 169.242278][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4159'. [ 169.257691][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4159'. [ 169.288818][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4160'. [ 169.308937][T13490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.330683][T13490] bond2: option all_slaves_active: invalid value (4) [ 169.348559][T13497] loop8: detected capacity change from 0 to 164 [ 169.601172][T13535] syzkaller1: entered promiscuous mode [ 169.606769][T13535] syzkaller1: entered allmulticast mode [ 169.725152][T13550] IPVS: Error connecting to the multicast addr [ 169.817275][ T4942] hid_parser_main: 31 callbacks suppressed [ 169.817320][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.830933][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.838370][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.845943][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.853342][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.860837][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.868257][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.875678][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.883242][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.890754][ T4942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.915747][ T4942] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 169.955775][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 169.955818][ T29] audit: type=1326 audit(1764631393.822:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.8.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 169.985632][ T29] audit: type=1326 audit(1764631393.822:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.8.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 170.053810][T13583] loop6: detected capacity change from 0 to 512 [ 170.070718][T13583] EXT4-fs (loop6): 1 truncate cleaned up [ 170.077258][T13583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.111778][ T6195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.200936][T13599] netlink: 'syz.6.4210': attribute type 1 has an invalid length. [ 170.225228][ T4942] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.232994][T13599] bond4: entered promiscuous mode [ 170.240009][T13599] bond4: entered allmulticast mode [ 170.260031][T13599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.283272][T13611] loop9: detected capacity change from 0 to 512 [ 170.296864][T13610] erspan1: entered allmulticast mode [ 170.299674][T13611] EXT4-fs: Ignoring removed oldalloc option [ 170.312160][T13614] netlink: 'syz.8.4216': attribute type 1 has an invalid length. [ 170.323088][T13610] bond4: (slave erspan1): making interface the new active one [ 170.326844][T13611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.330709][T13610] erspan1: entered promiscuous mode [ 170.343352][T13611] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.362583][T13611] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4214: bg 0: block 217: padding at end of block bitmap is not set [ 170.375609][T13610] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 170.377429][T13611] EXT4-fs (loop9): Remounting filesystem read-only [ 170.412173][T11598] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.425687][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4216'. [ 170.425770][T13618] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 170.442918][ T5553] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 170.450172][T13618] bond4: (slave batadv2): making interface the new active one [ 170.462806][ T5553] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 170.481727][T13618] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 170.493598][T13614] bond4 (unregistering): (slave batadv2): Releasing active interface [ 170.503245][T13614] bond4 (unregistering): Released all slaves [ 170.511898][T13623] 9p: Unknown access argument ¿: -22 [ 170.578574][ T29] audit: type=1326 audit(1764631402.444:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.1.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 170.603196][ T29] audit: type=1326 audit(1764631402.444:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.1.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 170.626840][ T29] audit: type=1326 audit(1764631402.444:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.1.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 170.650473][ T29] audit: type=1326 audit(1764631402.444:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.1.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 170.674297][ T29] audit: type=1326 audit(170.563:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.1.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 170.697818][ T29] audit: type=1326 audit(170.583:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.1.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 170.746335][T13647] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4231'. [ 171.178860][T13710] loop9: detected capacity change from 0 to 4096 [ 171.189100][T13710] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 171.218272][T13710] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.259630][T13710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.277468][T13727] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 171.357074][T13734] netlink: 'syz.1.4270': attribute type 1 has an invalid length. [ 171.397132][T13734] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 171.407007][T13734] bond2: (slave batadv1): making interface the new active one [ 171.421802][T13742] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.430006][T13734] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 171.450278][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4270'. [ 171.475287][T13734] bond2 (unregistering): (slave batadv1): Releasing active interface [ 171.492628][T13734] bond2 (unregistering): Released all slaves [ 171.558325][T13761] tipc: Enabling of bearer rejected, failed to enable media [ 171.636026][T13773] netlink: 'syz.1.4286': attribute type 1 has an invalid length. [ 171.655891][T13773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.669794][T13773] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 171.960412][T13813] netlink: 'syz.8.4301': attribute type 1 has an invalid length. [ 171.993300][T13813] bond4: entered promiscuous mode [ 171.998424][T13813] bond4: entered allmulticast mode [ 172.014247][T13813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.032687][T13819] erspan1: entered allmulticast mode [ 172.049810][T13819] bond4: (slave erspan1): making interface the new active one [ 172.057372][T13819] erspan1: entered promiscuous mode [ 172.068791][T13819] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 172.082050][T13825] netlink: 'syz.1.4306': attribute type 7 has an invalid length. [ 172.085088][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.118046][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.130641][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.191717][T13832] loop8: detected capacity change from 0 to 512 [ 172.200109][T13821] infiniband syz1: set active [ 172.204904][T13821] infiniband syz1: added vcan0 [ 172.210231][ T3396] vcan0 speed is unknown, defaulting to 1000 [ 172.217127][T13832] EXT4-fs: Ignoring removed oldalloc option [ 172.230000][T13821] RDS/IB: syz1: added [ 172.253751][T13821] smc: adding ib device syz1 with port count 1 [ 172.260121][T13821] smc: ib device syz1 port 1 has no pnetid [ 172.266357][ T4942] vcan0 speed is unknown, defaulting to 1000 [ 172.272785][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.282757][T13837] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4310'. [ 172.298148][T13832] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.313958][T13832] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4309: bg 0: block 217: padding at end of block bitmap is not set [ 172.338739][T13832] EXT4-fs (loop8): Remounting filesystem read-only [ 172.347821][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.365205][T10309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.394588][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.433709][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.450586][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4312'. [ 172.495687][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.567522][T13821] vcan0 speed is unknown, defaulting to 1000 [ 172.597594][T13857] netlink: 332 bytes leftover after parsing attributes in process `syz.8.4319'. [ 172.615197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.682658][T13862] wireguard0: entered promiscuous mode [ 172.725151][T13871] netlink: 'syz.9.4324': attribute type 1 has an invalid length. [ 172.753185][T13871] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.762443][T13871] bond3: (slave batadv1): making interface the new active one [ 172.772095][T13871] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 172.787367][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4324'. [ 172.801584][T13871] bond3 (unregistering): (slave batadv1): Releasing active interface [ 172.831647][T13871] bond3 (unregistering): Released all slaves [ 172.894269][T13883] sit0: Caught tx_queue_len zero misconfig [ 172.946144][T13889] netlink: 'syz.3.4332': attribute type 10 has an invalid length. [ 173.020241][T13889] team0: Port device geneve1 added [ 173.068821][ T5607] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.086272][ T5607] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.106883][T13902] loop6: detected capacity change from 0 to 1024 [ 173.117137][T13895] lo speed is unknown, defaulting to 1000 [ 173.123329][T13895] vcan0 speed is unknown, defaulting to 1000 [ 173.134080][ T5607] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.147382][ T5607] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.229144][T13907] wireguard0: entered promiscuous mode [ 173.286260][T13918] netlink: 'syz.6.4342': attribute type 1 has an invalid length. [ 173.375959][T13925] batadv_slave_1: Caught tx_queue_len zero misconfig [ 173.449445][T13928] bond5 (unregistering): Released all slaves [ 173.463188][T13927] loop8: detected capacity change from 0 to 4096 [ 173.493093][T13927] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 173.514024][T13927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.543109][T13927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.648977][T13943] loop8: detected capacity change from 0 to 128 [ 173.684549][T13943] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 173.692651][T13943] FAT-fs (loop8): Filesystem has been set read-only [ 173.752013][T13943] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 173.951052][T13962] netlink: 'syz.8.4361': attribute type 10 has an invalid length. [ 174.078704][T13973] vhci_hcd: default hub control req: 0000 v0008 i0002 l0 [ 174.102959][T13962] team0: Port device geneve1 added [ 174.293816][T13988] __nla_validate_parse: 3 callbacks suppressed [ 174.293834][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4374'. [ 174.520498][T13996] loop6: detected capacity change from 0 to 4096 [ 174.569001][T13996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.586887][T14005] lo speed is unknown, defaulting to 1000 [ 174.624990][T14005] vcan0 speed is unknown, defaulting to 1000 [ 174.665698][ T6195] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.882863][T14028] vlan2: entered allmulticast mode [ 175.011700][T14047] netlink: 'syz.8.4409': attribute type 1 has an invalid length. [ 175.040264][T14050] loop6: detected capacity change from 0 to 128 [ 175.067802][T14050] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 175.076003][T14050] FAT-fs (loop6): Filesystem has been set read-only [ 175.088195][T14047] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 175.100945][T14047] bond5: (slave batadv3): making interface the new active one [ 175.109189][T14050] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 175.117855][T14057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4403'. [ 175.128138][T14047] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 175.140014][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4409'. [ 175.159982][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 175.160003][ T29] audit: type=1326 audit(176.136:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.189523][T14058] bond5 (unregistering): (slave batadv3): Releasing active interface [ 175.199520][T14061] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.218588][T14058] bond5 (unregistering): Released all slaves [ 175.225412][ T29] audit: type=1326 audit(176.176:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.232235][T14061] vhci_hcd: invalid port number 96 [ 175.248436][ T29] audit: type=1326 audit(176.176:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.253472][T14061] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 175.276454][ T29] audit: type=1326 audit(176.176:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.306417][ T29] audit: type=1326 audit(176.176:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.329447][ T29] audit: type=1326 audit(176.186:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.352568][ T29] audit: type=1326 audit(176.186:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.375560][ T29] audit: type=1326 audit(176.186:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.398514][ T29] audit: type=1326 audit(176.186:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.421569][ T29] audit: type=1326 audit(176.186:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.3.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 175.601656][ T5607] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.667550][T14100] netlink: 'syz.1.4423': attribute type 3 has an invalid length. [ 176.624200][T14203] lo: Caught tx_queue_len zero misconfig [ 176.679355][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 176.721456][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 176.745889][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 176.759778][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 176.772408][T14214] netlink: 'syz.8.4471': attribute type 1 has an invalid length. [ 176.970609][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4481'. [ 177.035523][T14247] loop9: detected capacity change from 0 to 128 [ 177.046705][T14247] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 54) [ 177.054781][T14247] FAT-fs (loop9): Filesystem has been set read-only [ 177.073941][T14247] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 54) [ 177.219681][T14265] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4496'. [ 177.443769][T14283] rdma_op ffff88810c782180 conn xmit_rdma 0000000000000000 [ 177.581558][T14304] futex_wake_op: syz.3.4511 tries to shift op by -1; fix this program [ 177.595828][T14302] veth0: entered promiscuous mode [ 177.672689][T14301] veth0: left promiscuous mode [ 177.741870][T14312] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.127518][T14344] ip6_vti0: Caught tx_queue_len zero misconfig [ 178.682736][T14403] nfs: Bad value for 'source' [ 178.740158][T14409] netlink: 'syz.8.4560': attribute type 1 has an invalid length. [ 179.117801][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4572'. [ 179.130391][T14440] rdma_rxe: rxe_newlink: failed to add vcan0 [ 179.266679][T14449] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.329344][T14457] __nla_validate_parse: 3 callbacks suppressed [ 179.329360][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4581'. [ 179.335678][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.475458][T14472] rdma_rxe: rxe_newlink: failed to add vcan0 [ 179.551560][T14482] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 179.847468][T14508] rdma_rxe: rxe_newlink: failed to add vcan0 [ 179.914115][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4607'. [ 179.934649][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4607'. [ 179.934669][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4608'. [ 179.944292][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4607'. [ 179.958091][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4608'. [ 179.975652][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4607'. [ 179.995156][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4607'. [ 180.075803][T14534] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4614'. [ 180.084916][T14534] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4614'. [ 180.206518][T14545] netlink: 'syz.6.4619': attribute type 3 has an invalid length. [ 180.671545][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 180.671563][ T29] audit: type=1400 audit(181.646:4552): avc: denied { lock } for pid=14570 comm="syz.6.4631" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=41325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.511470][ T29] audit: type=1400 audit(182.486:4553): avc: denied { ioctl } for pid=14642 comm="syz.9.4663" path="socket:[42431]" dev="sockfs" ino=42431 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 181.704801][ T29] audit: type=1400 audit(182.676:4554): avc: denied { setopt } for pid=14659 comm="syz.3.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.783168][ T29] audit: type=1326 audit(182.756:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.1.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 181.806320][ T29] audit: type=1326 audit(182.756:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.1.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 181.898054][ T29] audit: type=1326 audit(182.756:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.1.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 181.921062][ T29] audit: type=1326 audit(182.806:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.1.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 181.944270][ T29] audit: type=1326 audit(182.816:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.1.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 181.967385][ T29] audit: type=1326 audit(182.826:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.1.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 181.990429][ T29] audit: type=1326 audit(182.826:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.1.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10eabf749 code=0x7ffc0000 [ 182.107755][T14681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.732403][T14760] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14760 comm=syz.6.4716 [ 183.267696][T14827] veth1: Caught tx_queue_len zero misconfig [ 183.335997][T14839] dummy0: entered promiscuous mode [ 183.341514][T14841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14841 comm=syz.3.4753 [ 183.342520][T14839] bond_slave_0: entered promiscuous mode [ 183.354226][T14841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14841 comm=syz.3.4753 [ 183.360631][T14839] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 183.382519][T14839] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.393843][T14839] hsr1: entered promiscuous mode [ 183.509411][T14855] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 184.275013][T14969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14969 comm=syz.9.4796 [ 184.513226][T15011] netlink: 'syz.3.4804': attribute type 3 has an invalid length. [ 184.746182][T15049] __nla_validate_parse: 19 callbacks suppressed [ 184.746199][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4810'. [ 184.762709][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4810'. [ 184.772316][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4810'. [ 184.782117][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4810'. [ 184.791255][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4810'. [ 185.887597][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 185.887611][ T29] audit: type=1326 audit(186.866:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15150 comm="syz.3.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 185.940694][ T29] audit: type=1326 audit(186.896:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15150 comm="syz.3.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 185.963822][ T29] audit: type=1326 audit(186.896:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15150 comm="syz.3.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 185.986851][ T29] audit: type=1326 audit(186.896:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15150 comm="syz.3.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 186.009774][ T29] audit: type=1326 audit(186.896:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15150 comm="syz.3.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 186.032812][ T29] audit: type=1326 audit(185.902:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15150 comm="syz.3.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 186.055979][ T29] audit: type=1326 audit(185.902:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15150 comm="syz.3.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 186.195036][ T29] audit: type=1326 audit(186.152:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 186.218291][ T29] audit: type=1326 audit(186.152:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 186.241205][ T29] audit: type=1326 audit(186.152:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 186.299036][T15169] gre1: entered promiscuous mode [ 186.426239][T15184] netlink: 'syz.3.4844': attribute type 13 has an invalid length. [ 186.495720][ T5606] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.514310][ T5606] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.522968][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4845'. [ 186.535744][ T5606] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.544303][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4845'. [ 186.570213][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4845'. [ 186.599903][ T5606] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.608455][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4845'. [ 186.676108][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4853'. [ 186.924088][T15243] gre1: entered promiscuous mode [ 186.936812][T15245] netlink: 'syz.9.4872': attribute type 3 has an invalid length. [ 186.963077][T15250] IPv6: Can't replace route, no match found [ 187.345058][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.761522][T15301] IPv6: Can't replace route, no match found [ 188.235508][T15364] bridge0: port 3(macsec1) entered blocking state [ 188.242130][T15364] bridge0: port 3(macsec1) entered disabled state [ 188.266091][T15364] macsec1: entered allmulticast mode [ 188.280235][T15364] macsec1: left allmulticast mode [ 188.508443][T15390] netlink: 'syz.6.4939': attribute type 12 has an invalid length. [ 188.884888][T15445] syzkaller0: entered allmulticast mode [ 188.892613][T15445] syzkaller0 (unregistering): left allmulticast mode [ 188.989367][T15459] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 189.345064][ T3424] IPVS: starting estimator thread 0... [ 189.445208][T15535] IPVS: using max 2352 ests per chain, 117600 per kthread [ 189.581975][T15576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.626720][T15576] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 189.656531][T15576] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 189.667125][T15590] xt_hashlimit: max too large, truncated to 1048576 [ 189.674626][T15590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.684186][T15576] bond5 (unregistering): Released all slaves [ 189.831394][T15611] __nla_validate_parse: 20 callbacks suppressed [ 189.831414][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4994'. [ 189.848911][ T5582] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.857830][ T5582] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.875235][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4994'. [ 189.903017][ T5582] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.920277][ T5582] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.052820][T15644] syzkaller0: entered allmulticast mode [ 190.061541][T15644] syzkaller0 (unregistering): left allmulticast mode [ 190.272991][T15681] xt_hashlimit: max too large, truncated to 1048576 [ 190.280564][T15681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.331864][ T4955] kernel read not supported for file bpf-prog (pid: 4955 comm: kworker/0:13) [ 190.388688][T15694] 9pnet: Could not find request transport: f [ 190.730743][T15725] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 190.865559][T15745] xt_hashlimit: max too large, truncated to 1048576 [ 190.898640][T15745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.930963][T15756] lo speed is unknown, defaulting to 1000 [ 190.937719][T15756] vcan0 speed is unknown, defaulting to 1000 [ 190.998882][T15762] lo speed is unknown, defaulting to 1000 [ 191.016606][T15762] vcan0 speed is unknown, defaulting to 1000 [ 191.027463][T15768] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5049'. [ 191.044757][T15771] xt_hashlimit: max too large, truncated to 1048576 [ 191.522291][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 191.522308][ T29] audit: type=1400 audit(191.492:4875): avc: denied { bind } for pid=15832 comm="syz.8.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.547394][ T29] audit: type=1400 audit(191.492:4876): avc: denied { name_bind } for pid=15832 comm="syz.8.5062" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 191.567837][ T29] audit: type=1400 audit(191.492:4877): avc: denied { node_bind } for pid=15832 comm="syz.8.5062" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 191.671783][ T29] audit: type=1400 audit(191.642:4878): avc: denied { write } for pid=4955 comm="kworker/0:13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43630 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 192.161447][T15895] lo speed is unknown, defaulting to 1000 [ 192.195973][T15895] vcan0 speed is unknown, defaulting to 1000 [ 192.236170][T15906] lo speed is unknown, defaulting to 1000 [ 192.269344][T15917] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5070'. [ 192.371520][T15906] vcan0 speed is unknown, defaulting to 1000 [ 192.794715][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5091'. [ 192.803899][T15977] bridge_slave_1: left allmulticast mode [ 192.809786][T15977] bridge_slave_1: left promiscuous mode [ 192.815482][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.824675][T15977] bridge_slave_0: left promiscuous mode [ 192.830509][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.474011][T16014] netlink: 660 bytes leftover after parsing attributes in process `syz.9.5107'. [ 193.515398][ T29] audit: type=1400 audit(193.482:4879): avc: denied { mount } for pid=16016 comm="syz.6.5108" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 193.658909][ T29] audit: type=1326 audit(193.622:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.6.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ae5f749 code=0x7ffc0000 [ 193.682203][ T29] audit: type=1326 audit(193.622:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.6.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f8b1ae5f749 code=0x7ffc0000 [ 193.705143][ T29] audit: type=1326 audit(193.622:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.6.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ae5f749 code=0x7ffc0000 [ 193.890575][T16064] netlink: 'syz.9.5131': attribute type 3 has an invalid length. [ 193.898515][T16064] netlink: 'syz.9.5131': attribute type 1 has an invalid length. [ 193.906356][T16064] netlink: 181400 bytes leftover after parsing attributes in process `syz.9.5131'. [ 193.934221][ T29] audit: type=1326 audit(193.902:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.6.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ae5f749 code=0x7ffc0000 [ 193.957337][ T29] audit: type=1326 audit(193.902:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.6.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ae5f749 code=0x7ffc0000 [ 194.139979][T16084] xt_hashlimit: max too large, truncated to 1048576 [ 194.172454][T16084] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.687414][T16160] ip6gre0: entered promiscuous mode [ 194.713868][T16160] team0: Device ip6gre0 is of different type [ 194.759850][T16167] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5178'. [ 194.772198][T16167] gtp0: entered promiscuous mode [ 194.926691][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5189'. [ 194.959133][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5189'. [ 195.043955][T16208] netlink: 'syz.9.5198': attribute type 1 has an invalid length. [ 195.077030][T16208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.100824][T16208] bond3: entered allmulticast mode [ 195.168095][T16228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.240176][T16235] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 195.492020][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5224'. [ 195.583302][T16276] Invalid ELF header len 8 [ 197.074254][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5250'. [ 197.141263][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 197.141308][ T29] audit: type=1326 audit(197.112:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb31c2565e7 code=0x7ffc0000 [ 197.211434][ T29] audit: type=1326 audit(197.112:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb31c1fb829 code=0x7ffc0000 [ 197.234370][ T29] audit: type=1326 audit(197.112:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb31c2565e7 code=0x7ffc0000 [ 197.257334][ T29] audit: type=1326 audit(197.112:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb31c1fb829 code=0x7ffc0000 [ 197.280290][ T29] audit: type=1326 audit(197.112:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 197.303294][ T29] audit: type=1326 audit(197.112:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 197.326290][ T29] audit: type=1326 audit(197.112:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 197.349324][ T29] audit: type=1326 audit(197.112:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb31c2565e7 code=0x7ffc0000 [ 197.372267][ T29] audit: type=1326 audit(197.112:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb31c1fb829 code=0x7ffc0000 [ 197.395308][ T29] audit: type=1326 audit(197.112:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb31c2565e7 code=0x7ffc0000 [ 197.515329][T16362] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 197.795093][T16403] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5283'. [ 197.997720][T16418] rdma_op ffff88815ca39180 conn xmit_rdma 0000000000000000 [ 198.122434][T16434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16434 comm=syz.9.5295 [ 198.135105][T16434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16434 comm=syz.9.5295 [ 198.514524][T16470] netlink: 1347 bytes leftover after parsing attributes in process `syz.9.5310'. [ 198.665171][T16480] netlink: 'syz.3.5323': attribute type 3 has an invalid length. [ 199.351447][T16516] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5329'. [ 199.530825][T16539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5338'. [ 199.903575][T16589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5361'. [ 199.971202][T16591] infiniband syz!: set down [ 199.975901][T16591] infiniband syz!: added team_slave_0 [ 200.000010][T16591] RDS/IB: syz!: added [ 200.005428][T16591] smc: adding ib device syz! with port count 1 [ 200.011673][T16591] smc: ib device syz! port 1 has no pnetid [ 200.357001][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5369'. [ 200.473920][T16627] netlink: 1343 bytes leftover after parsing attributes in process `syz.3.5372'. [ 200.506749][T16631] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5375'. [ 202.055038][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.240870][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5437'. [ 202.367746][T16789] netlink: 'syz.6.5440': attribute type 2 has an invalid length. [ 202.390237][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 202.390257][ T29] audit: type=1400 audit(202.362:5131): avc: denied { read } for pid=16788 comm="syz.6.5440" path="socket:[45743]" dev="sockfs" ino=45743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 202.657131][ T29] audit: type=1326 audit(202.632:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.9.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 202.680081][ T29] audit: type=1326 audit(202.632:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.9.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 202.703187][ T29] audit: type=1326 audit(202.632:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.9.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 202.726382][ T29] audit: type=1326 audit(202.632:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.9.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 202.749298][ T29] audit: type=1326 audit(202.632:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.9.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 202.772230][ T29] audit: type=1326 audit(202.632:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.9.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 202.795039][ T29] audit: type=1326 audit(202.632:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.9.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 202.817981][ T29] audit: type=1326 audit(202.632:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.9.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 202.842486][T16804] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5446'. [ 203.095690][T16820] pim6reg: entered allmulticast mode [ 203.105236][T16820] pim6reg: left allmulticast mode [ 203.967967][ T29] audit: type=1400 audit(203.942:5140): avc: denied { watch } for pid=16857 comm="syz.8.5469" path="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.203448][T16886] netlink: 'syz.6.5480': attribute type 12 has an invalid length. [ 205.149644][T16931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.167434][T16931] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.183729][T16931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.394258][T16957] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5508'. [ 205.817386][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5535'. [ 205.835948][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5535'. [ 205.889184][T17017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17017 comm=syz.3.5537 [ 205.923694][T17019] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5538'. [ 205.987426][T17023] lo speed is unknown, defaulting to 1000 [ 205.993487][T17023] vcan0 speed is unknown, defaulting to 1000 [ 206.126632][T17034] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5555'. [ 206.890879][T17099] netlink: 'syz.8.5573': attribute type 2 has an invalid length. [ 206.950724][T17103] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5575'. [ 207.077226][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5579'. [ 207.121893][T17117] smc: net device hsr0 applied user defined pnetid SYZ2 [ 207.129675][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5580'. [ 207.138894][T17117] smc: net device hsr0 erased user defined pnetid SYZ2 [ 207.142046][T17115] ip6gre2: entered allmulticast mode [ 207.607988][T17154] netlink: 'syz.6.5596': attribute type 12 has an invalid length. [ 208.338342][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 208.338360][ T29] audit: type=1400 audit(208.312:5283): avc: denied { watch } for pid=17214 comm="syz.8.5621" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 208.387154][T17219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5622'. [ 208.451855][T17227] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5627'. [ 208.766610][T17253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17253 comm=syz.3.5639 [ 208.810386][ T29] audit: type=1400 audit(208.782:5284): avc: denied { wake_alarm } for pid=17256 comm="syz.9.5641" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.370070][T17327] vlan2: entered allmulticast mode [ 209.375577][T17327] dummy0: entered allmulticast mode [ 209.382384][ T29] audit: type=1326 audit(209.352:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17328 comm="syz.8.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 209.412893][ T29] audit: type=1326 audit(209.362:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17328 comm="syz.8.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 209.435885][ T29] audit: type=1326 audit(209.362:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17328 comm="syz.8.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 209.458946][ T29] audit: type=1326 audit(209.362:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17328 comm="syz.8.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 209.482092][ T29] audit: type=1326 audit(209.362:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17328 comm="syz.8.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 209.505085][ T29] audit: type=1326 audit(209.362:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17328 comm="syz.8.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 209.528019][ T29] audit: type=1326 audit(209.362:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17328 comm="syz.8.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 209.550963][ T29] audit: type=1326 audit(209.382:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17328 comm="syz.8.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5068f749 code=0x7ffc0000 [ 209.577187][T17331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17331 comm=syz.1.5672 [ 209.794854][T17337] lo speed is unknown, defaulting to 1000 [ 209.853328][T17337] vcan0 speed is unknown, defaulting to 1000 [ 209.985341][T17368] bridge: RTM_NEWNEIGH with invalid ether address [ 210.903469][T17448] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 210.973926][T17462] __nla_validate_parse: 8 callbacks suppressed [ 210.973941][T17462] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5734'. [ 211.128522][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5745'. [ 211.566303][T17521] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5752'. [ 211.638056][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5753'. [ 212.466952][T17580] netlink: 'syz.8.5786': attribute type 2 has an invalid length. [ 212.666202][T17595] pim6reg: entered allmulticast mode [ 212.683673][T17595] pim6reg: left allmulticast mode [ 213.439231][T17640] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5794'. [ 213.875365][T17669] vlan2: entered allmulticast mode [ 213.993501][T17679] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 214.024728][T17679] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 214.111458][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 214.111477][ T29] audit: type=1400 audit(214.082:5360): avc: denied { remount } for pid=17682 comm="syz.6.5820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 214.217708][ T29] audit: type=1326 audit(214.172:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.240728][ T29] audit: type=1326 audit(214.172:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.263859][ T29] audit: type=1326 audit(214.182:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.286854][ T29] audit: type=1326 audit(214.182:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.309994][ T29] audit: type=1326 audit(214.182:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.333024][ T29] audit: type=1326 audit(214.182:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.356218][ T29] audit: type=1326 audit(214.182:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.379316][ T29] audit: type=1326 audit(214.182:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.402306][ T29] audit: type=1326 audit(214.182:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31c25f749 code=0x7ffc0000 [ 214.562751][T17713] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5831'. [ 214.630719][T17717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=17717 comm=syz.6.5834 [ 214.912965][T17755] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17755 comm=syz.1.5851 [ 215.023290][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5861'. [ 215.032567][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5861'. [ 215.205224][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5873'. [ 215.214636][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5873'. [ 216.466850][T17879] __nla_validate_parse: 1 callbacks suppressed [ 216.466869][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5902'. [ 216.642233][T17897] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5910'. [ 216.839100][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5915'. [ 216.880559][T17907] ip6gre2: entered allmulticast mode [ 216.953330][T17913] lo speed is unknown, defaulting to 1000 [ 216.968385][T17913] vcan0 speed is unknown, defaulting to 1000 [ 217.163616][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5922'. [ 217.183585][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5922'. [ 217.217022][T17919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5922'. [ 217.247432][T17919] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5922'. [ 217.376869][T17924] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5934'. [ 217.387605][T17928] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 217.516910][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5940'. [ 217.532291][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5940'. [ 218.871382][T17983] netlink: 'syz.8.5959': attribute type 1 has an invalid length. [ 218.888138][T17983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.904803][T17983] bond5 (unregistering): Released all slaves [ 218.953418][T17994] SELinux: Context is not valid (left unmapped). [ 219.056619][T18002] vlan2: entered allmulticast mode [ 219.061799][T18002] dummy0: entered allmulticast mode [ 219.413329][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 219.413353][ T29] audit: type=1326 audit(219.382:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18042 comm="syz.9.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 219.442662][ T29] audit: type=1326 audit(219.382:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18042 comm="syz.9.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 219.465606][ T29] audit: type=1326 audit(219.382:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18042 comm="syz.9.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 219.488554][ T29] audit: type=1326 audit(219.382:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18042 comm="syz.9.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 219.511465][ T29] audit: type=1326 audit(219.382:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18042 comm="syz.9.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 219.740477][ T29] audit: type=1400 audit(219.712:5501): avc: denied { read } for pid=18064 comm="syz.6.5986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 219.876205][T18075] xt_policy: neither incoming nor outgoing policy selected [ 220.013988][ T29] audit: type=1326 audit(219.982:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.9.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 220.036992][ T29] audit: type=1326 audit(219.982:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.9.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 220.060017][ T29] audit: type=1326 audit(219.982:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.9.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 220.111925][ T29] audit: type=1326 audit(219.982:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.9.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4104cf749 code=0x7ffc0000 [ 220.169548][T18106] lo speed is unknown, defaulting to 1000 [ 220.177807][T18106] vcan0 speed is unknown, defaulting to 1000 [ 220.689399][T18128] vlan2: entered allmulticast mode [ 220.694568][T18128] dummy0: entered allmulticast mode [ 221.583443][T18180] vlan3: entered allmulticast mode [ 221.905784][T18184] __nla_validate_parse: 8 callbacks suppressed [ 221.905805][T18184] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6033'. [ 222.730029][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6057'. [ 222.739119][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6057'. [ 223.123737][T18274] macvtap0: entered promiscuous mode [ 223.135090][T18274] macvtap0: left promiscuous mode [ 223.223566][T18280] xt_policy: neither incoming nor outgoing policy selected [ 223.965556][T18327] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 223.983719][T18327] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 224.247056][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6099'. [ 224.760142][T18339] ================================================================== [ 224.768296][T18339] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 224.776933][T18339] [ 224.779275][T18339] write to 0xffff888118a76ca8 of 8 bytes by task 18334 on cpu 0: [ 224.787011][T18339] shmem_file_splice_read+0x470/0x600 [ 224.792432][T18339] splice_direct_to_actor+0x26f/0x680 [ 224.797846][T18339] do_splice_direct+0xda/0x150 [ 224.802644][T18339] do_sendfile+0x380/0x650 [ 224.807112][T18339] __x64_sys_sendfile64+0x105/0x150 [ 224.812364][T18339] x64_sys_call+0x2db1/0x3000 [ 224.817074][T18339] do_syscall_64+0xd2/0x200 [ 224.821598][T18339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.827606][T18339] [ 224.829950][T18339] write to 0xffff888118a76ca8 of 8 bytes by task 18339 on cpu 1: [ 224.837678][T18339] shmem_file_splice_read+0x470/0x600 [ 224.843086][T18339] splice_direct_to_actor+0x26f/0x680 [ 224.848493][T18339] do_splice_direct+0xda/0x150 [ 224.853289][T18339] do_sendfile+0x380/0x650 [ 224.857722][T18339] __x64_sys_sendfile64+0x105/0x150 [ 224.862973][T18339] x64_sys_call+0x2db1/0x3000 [ 224.867677][T18339] do_syscall_64+0xd2/0x200 [ 224.872216][T18339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.878138][T18339] [ 224.880467][T18339] value changed: 0x0000000000004431 -> 0x0000000000004435 [ 224.887652][T18339] [ 224.890092][T18339] Reported by Kernel Concurrency Sanitizer on: [ 224.896293][T18339] CPU: 1 UID: 0 PID: 18339 Comm: syz.9.6089 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.907711][T18339] Tainted: [W]=WARN [ 224.911528][T18339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.921608][T18339] ================================================================== [ 231.495066][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!