last executing test programs: 6m24.487250206s ago: executing program 32 (id=56): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 6m10.512375644s ago: executing program 33 (id=231): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318300000000000000001900000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 5m17.742803364s ago: executing program 34 (id=1782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x585b8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586e, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0x4, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r2, 0x0) 5m16.164165271s ago: executing program 35 (id=1817): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000200)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) 5m13.82885206s ago: executing program 36 (id=1839): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="421f"], 0x5) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1018a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4m27.001414539s ago: executing program 37 (id=3368): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xd2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) pipe(&(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xe1fd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 4m25.726262762s ago: executing program 38 (id=3391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 4m22.814368557s ago: executing program 0 (id=3412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) 4m22.77791101s ago: executing program 0 (id=3414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0x0, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 4m22.646544531s ago: executing program 0 (id=3418): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5875, @mcast1, 0x3}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @mcast1, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/109, 0x6d}], 0x2, 0xa3, 0x7) 4m22.552214668s ago: executing program 0 (id=3421): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 4m22.27881516s ago: executing program 39 (id=3430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) close(0xffffffffffffffff) close(0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000003c0)='.+@\x00', 0x0) 4m22.267754771s ago: executing program 0 (id=3432): unshare(0x22020600) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m21.834983365s ago: executing program 2 (id=3441): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 4m21.732516124s ago: executing program 2 (id=3443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 4m21.697213187s ago: executing program 2 (id=3444): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x15, 0x0, r3, 0x0, 0x0, r3, 0x1400, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m21.649528071s ago: executing program 2 (id=3445): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') pivot_root(0x0, 0x0) 4m21.623665043s ago: executing program 2 (id=3446): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 4m21.322829447s ago: executing program 0 (id=3447): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m21.264245282s ago: executing program 40 (id=3447): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m20.462804376s ago: executing program 2 (id=3461): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 4m20.462567217s ago: executing program 41 (id=3461): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 4m0.379393077s ago: executing program 4 (id=4117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) listen(r0, 0x8000) 3m59.442688703s ago: executing program 4 (id=4136): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x7, 0x0, 0x0, 0x304, 0xfffffffd}, 0x9c) 3m59.363238229s ago: executing program 4 (id=4141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) 3m59.271924857s ago: executing program 4 (id=4143): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 3m59.246539719s ago: executing program 4 (id=4145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) 3m58.943505143s ago: executing program 4 (id=4150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 3m58.943371953s ago: executing program 42 (id=4150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1m46.850147375s ago: executing program 5 (id=9181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x5}}}}}}, 0x0) 1m46.800491719s ago: executing program 5 (id=9183): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1m46.754723802s ago: executing program 5 (id=9187): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) 1m46.730787124s ago: executing program 5 (id=9189): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x16, 0x0) 1m46.705170747s ago: executing program 5 (id=9192): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e60, @local}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x3}, 0x0, 0x0, 0xa, 0x8, 0x0, 0x1, 0x5e, 0x8001}}], 0x58}, 0x0) 1m46.551934289s ago: executing program 5 (id=9197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) 1m46.551663278s ago: executing program 43 (id=9197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) 1m22.397908815s ago: executing program 7 (id=10134): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 1m22.318264671s ago: executing program 7 (id=10136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 1m22.258297686s ago: executing program 7 (id=10140): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) vmsplice(r0, &(0x7f0000000200), 0x3af, 0x2) 1m21.589326349s ago: executing program 7 (id=10149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x1000) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 1m21.551169733s ago: executing program 7 (id=10150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m19.277237315s ago: executing program 7 (id=10229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 1m19.276880845s ago: executing program 44 (id=10229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 1.62082132s ago: executing program 9 (id=12663): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 1.609575611s ago: executing program 9 (id=12655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000c00)={[], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@uid_lt}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}]}, 0x6, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 1.391653798s ago: executing program 9 (id=12658): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={0x48, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r1 = syz_open_pts(r0, 0x20800) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 1.391405828s ago: executing program 8 (id=12659): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000010980)=""/204, 0xcc) 1.361762791s ago: executing program 8 (id=12660): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 1.341173282s ago: executing program 8 (id=12661): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) 1.319083584s ago: executing program 8 (id=12662): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000002140)=@newtaction={0x18, 0x32, 0x829, 0x70bd2c, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.292728526s ago: executing program 8 (id=12664): r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x80000) read(r3, &(0x7f0000000380)=""/149, 0x95) 917.907676ms ago: executing program 6 (id=12665): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) 892.010068ms ago: executing program 6 (id=12666): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 852.094322ms ago: executing program 1 (id=12668): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000500)='sched_switch\x00', r0, 0x0, 0x81c}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 822.531864ms ago: executing program 6 (id=12669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 820.221934ms ago: executing program 1 (id=12679): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 785.312177ms ago: executing program 6 (id=12670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x7ffff088) 755.085459ms ago: executing program 6 (id=12671): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x48400) 754.435239ms ago: executing program 3 (id=12682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 694.723194ms ago: executing program 3 (id=12672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x8000fffffffc) 650.606287ms ago: executing program 1 (id=12673): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 458.977413ms ago: executing program 9 (id=12674): socket(0x400000000010, 0x3, 0x0) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000600)={0x11, 0x0, 0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffff9, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f9, 0x4db, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x30, 0xffffffffffffffff, 0x71f4c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x29081e, &(0x7f0000000500)={[{@nodioread_nolock}, {@prjquota}, {@stripe={'stripe', 0x3d, 0x8000000000000001}}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}]}, 0x1, 0x4fc, &(0x7f0000000ec0)="$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") 458.740213ms ago: executing program 1 (id=12675): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 442.156564ms ago: executing program 6 (id=12676): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) 430.103915ms ago: executing program 3 (id=12677): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800000016000100fce92584e2"], 0xf8}}, 0x0) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x4a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 417.307866ms ago: executing program 1 (id=12678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x81c0, 0x80000000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 356.480671ms ago: executing program 9 (id=12680): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat(r1, 0x0, 0x2040, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec", 0xc) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 227.069431ms ago: executing program 1 (id=12681): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) unshare(0x2040400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d202", 0x27}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) 226.870672ms ago: executing program 3 (id=12683): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 181.396445ms ago: executing program 8 (id=12684): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 121.20333ms ago: executing program 3 (id=12685): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=12686): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x9, 0xfc00, 0x0, 0x1, 0x8001, 0x8000, 0x8000, 0x8}, 0x20) kernel console output (not intermixed with test programs): 3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.453845][T27395] loop7: detected capacity change from 0 to 764 [ 344.477916][T27395] Symlink component flag not implemented [ 344.487496][T27395] Symlink component flag not implemented (101) [ 344.502527][T27401] loop3: detected capacity change from 0 to 512 [ 344.511483][T27405] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9862'. [ 344.521106][T27401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.531748][T27401] EXT4-fs (loop3): orphan cleanup on readonly fs [ 344.538987][T27401] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9860: bg 0: block 248: padding at end of block bitmap is not set [ 344.554724][T27407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9863'. [ 344.555856][T27401] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9860: Failed to acquire dquot type 1 [ 344.576109][T27401] EXT4-fs (loop3): 1 truncate cleaned up [ 344.597114][T27401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.632292][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.677440][T27415] lo speed is unknown, defaulting to 1000 [ 344.684976][T27415] lo speed is unknown, defaulting to 1000 [ 344.996311][T27453] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 345.794529][T27523] loop7: detected capacity change from 0 to 512 [ 345.804402][T27523] EXT4-fs (loop7): orphan cleanup on readonly fs [ 345.811329][T27523] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.9908: bad orphan inode 13 [ 345.821925][T27523] ext4_test_bit(bit=12, block=18) = 1 [ 345.827386][T27523] is_bad_inode(inode)=0 [ 345.831588][T27523] NEXT_ORPHAN(inode)=2130706432 [ 345.837006][T27523] max_ino=32 [ 345.840329][T27523] i_nlink=1 [ 345.845845][T27523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.875902][T25856] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.164537][T27538] netlink: 188 bytes leftover after parsing attributes in process `syz.7.9914'. [ 346.636169][ T30] kauditd_printk_skb: 307 callbacks suppressed [ 346.636189][ T30] audit: type=1326 audit(334.570:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.671156][ T30] audit: type=1326 audit(334.607:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.694432][ T30] audit: type=1326 audit(334.607:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.717539][ T30] audit: type=1326 audit(334.607:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.740761][ T30] audit: type=1326 audit(334.607:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.763763][ T30] audit: type=1326 audit(334.607:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.787000][ T30] audit: type=1326 audit(334.607:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.810069][ T30] audit: type=1326 audit(334.607:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.833057][ T30] audit: type=1326 audit(334.607:11717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 346.856144][ T30] audit: type=1326 audit(334.607:11718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27541 comm="syz.8.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 347.188586][T27555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9924'. [ 347.197702][T27555] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9924'. [ 347.207038][T27555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9924'. [ 347.216206][T27555] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9924'. [ 347.225278][T27555] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9924'. [ 347.481960][T27579] 9pnet_fd: Insufficient options for proto=fd [ 347.906341][T27625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9956'. [ 347.919697][T27625] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 348.106037][T27655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9969'. [ 348.115489][T27657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9970'. [ 348.124869][T27657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9970'. [ 348.140075][T27655] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 348.191153][T27662] lo speed is unknown, defaulting to 1000 [ 348.207101][T27662] lo speed is unknown, defaulting to 1000 [ 348.487052][T27692] lo speed is unknown, defaulting to 1000 [ 348.502187][T27692] lo speed is unknown, defaulting to 1000 [ 348.986193][T27726] netlink: 'syz.8.9999': attribute type 27 has an invalid length. [ 349.007400][T27726] 1{X功: left allmulticast mode [ 349.049047][T27726] erspan0: left promiscuous mode [ 349.063874][T27726] bridge0: port 4(dummy0) entered blocking state [ 349.070493][T27726] bridge0: port 4(dummy0) entered forwarding state [ 349.133346][T27726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.670982][T27784] IPVS: Error connecting to the multicast addr [ 350.015459][T27826] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 350.155207][T27847] netlink: 'syz.1.10056': attribute type 1 has an invalid length. [ 350.219226][T27847] bond3: (slave geneve3): making interface the new active one [ 350.254383][T27847] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 350.265727][ T4571] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 350.290116][ T4571] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 350.328355][ T4571] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 350.343351][T27856] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.353371][T27856] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.379552][ T4571] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 350.406947][T27856] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.417133][T27856] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.507197][T27856] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.517061][T27856] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.569243][T27856] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.579350][T27856] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.663371][ T4601] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.671843][ T4601] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.690028][ T4601] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.698579][ T4601] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.716931][ T4601] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.725425][ T4601] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.738123][ T4601] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.746491][ T4601] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.921982][T27916] netlink: 'syz.3.10086': attribute type 1 has an invalid length. [ 350.941888][T27916] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.961471][T27916] bond5: (slave gretap0): making interface the new active one [ 350.970086][T27916] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 351.064075][T27928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27928 comm=syz.3.10090 [ 351.077044][T27928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27928 comm=syz.3.10090 [ 351.484663][T27984] lo speed is unknown, defaulting to 1000 [ 351.491656][T27984] lo speed is unknown, defaulting to 1000 [ 351.761663][T28018] netlink: 'syz.1.10131': attribute type 1 has an invalid length. [ 351.801842][T28018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.834824][T28018] bond4: (slave gretap0): making interface the new active one [ 351.843567][T28018] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 351.978445][T28041] loop7: detected capacity change from 0 to 7 [ 351.984797][T28041] Buffer I/O error on dev loop7, logical block 0, async page read [ 351.992909][T28041] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.000929][T28041] loop7: unable to read partition table [ 352.043868][T28041] loop_reread_partitions: partition scan of loop7 (x熝鵂诂ЫdGご鄸冚’牆夥 [ 352.043868][T28041] ) failed (rc=-5) [ 352.190822][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 352.190846][ T30] audit: type=1326 audit(339.771:11930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.220555][ T30] audit: type=1326 audit(339.771:11931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.288478][ T30] audit: type=1326 audit(339.771:11932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.311677][ T30] audit: type=1326 audit(339.771:11933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.335071][ T30] audit: type=1326 audit(339.771:11934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.358161][ T30] audit: type=1326 audit(339.771:11935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.381370][ T30] audit: type=1326 audit(339.771:11936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.404614][ T30] audit: type=1326 audit(339.771:11937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.427905][ T30] audit: type=1326 audit(339.771:11938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 352.450990][ T30] audit: type=1326 audit(339.771:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.3.10144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 353.152909][T28083] loop3: detected capacity change from 0 to 764 [ 353.599260][T28133] __nla_validate_parse: 14 callbacks suppressed [ 353.599283][T28133] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10181'. [ 353.703867][T28145] bridge: RTM_NEWNEIGH with invalid ether address [ 353.796043][T28155] geneve2: entered promiscuous mode [ 353.801348][T28155] geneve2: entered allmulticast mode [ 354.347319][T28197] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10210'. [ 354.356576][T28197] netem: change failed [ 354.635623][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10226'. [ 354.644780][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10226'. [ 354.768779][T28231] netlink: '+}[@': attribute type 1 has an invalid length. [ 354.776299][T28231] netlink: 198116 bytes leftover after parsing attributes in process `+}[@'. [ 354.863770][ T4571] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.873819][ T4571] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.937837][ T4571] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.947904][ T4571] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.992757][ T4571] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.002648][ T4571] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.055176][ T4571] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.065100][ T4571] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.084517][T28246] lo speed is unknown, defaulting to 1000 [ 355.091116][T28246] lo speed is unknown, defaulting to 1000 [ 355.162103][T28246] chnl_net:caif_netlink_parms(): no params data found [ 355.177456][ T4571] bridge_slave_1: left allmulticast mode [ 355.183244][ T4571] bridge_slave_1: left promiscuous mode [ 355.188880][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.196656][ T4571] bridge_slave_0: left promiscuous mode [ 355.202355][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.365864][ T4571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.376665][ T4571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.386296][ T4571] bond0 (unregistering): Released all slaves [ 355.394848][ T4571] bond1 (unregistering): Released all slaves [ 355.403456][ T4571] bond2 (unregistering): Released all slaves [ 355.416563][T28267] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 355.454318][T28246] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.461628][T28246] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.469034][T28246] bridge_slave_0: entered allmulticast mode [ 355.476546][T28246] bridge_slave_0: entered promiscuous mode [ 355.486259][T28246] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.493533][T28246] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.500906][T28246] bridge_slave_1: entered allmulticast mode [ 355.507646][T28246] bridge_slave_1: entered promiscuous mode [ 355.523258][ T4571] hsr_slave_0: left promiscuous mode [ 355.531519][ T4571] hsr_slave_1: left promiscuous mode [ 355.537412][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.544827][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.554159][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.561676][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.574472][ T4571] veth1_macvtap: left promiscuous mode [ 355.581595][ T4571] veth0_macvtap: left promiscuous mode [ 355.587162][ T4571] veth1_vlan: left promiscuous mode [ 355.595383][ T4571] veth0_vlan: left promiscuous mode [ 355.685548][T28282] cgroup: Invalid name [ 355.690017][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 355.711309][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 355.791513][T28246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.809255][T28246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.862650][T28246] team0: Port device team_slave_0 added [ 355.876306][T28246] team0: Port device team_slave_1 added [ 355.907570][T28246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.914675][T28246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.940807][T28246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.952937][T28246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.958899][T28314] loop3: detected capacity change from 0 to 1024 [ 355.959923][T28246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.992369][T28246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.007014][T28314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 356.032923][T28314] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 356.047946][T28314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28 [ 356.060498][T28314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 356.060498][T28314] [ 356.070338][T28314] EXT4-fs (loop3): Total free blocks count 0 [ 356.076399][T28314] EXT4-fs (loop3): Free/Dirty block details [ 356.082331][T28314] EXT4-fs (loop3): free_blocks=4293918720 [ 356.088059][T28314] EXT4-fs (loop3): dirty_blocks=64 [ 356.093248][T28314] EXT4-fs (loop3): Block reservation details [ 356.099345][T28314] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 356.108836][T28246] hsr_slave_0: entered promiscuous mode [ 356.115291][T28246] hsr_slave_1: entered promiscuous mode [ 356.121247][T28246] debugfs: 'hsr0' already exists in 'hsr' [ 356.127208][T28246] Cannot create hsr debugfs directory [ 356.133093][ T4601] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:10: lblock 40 mapped to illegal pblock 8 (length 8) [ 356.148172][ T4601] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117 [ 356.235756][T28324] netlink: 'syz.8.10259': attribute type 10 has an invalid length. [ 356.298988][T28327] netlink: 'syz.8.10259': attribute type 10 has an invalid length. [ 356.310776][T28324] bridge0: port 4(dummy0) entered disabled state [ 356.318326][T28324] dummy0: left allmulticast mode [ 356.323501][T28324] dummy0: left promiscuous mode [ 356.328731][T28324] bridge0: port 4(dummy0) entered disabled state [ 356.529821][T28246] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 356.539253][T28246] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 356.548993][T28246] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 356.558363][T28246] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 356.608408][T28246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.624379][T28246] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.635130][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.642375][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.655534][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.662728][ T4601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.696767][T28246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.707317][T28246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.796119][T28246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.855437][T28365] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 356.990144][T28246] veth0_vlan: entered promiscuous mode [ 356.998555][T28246] veth1_vlan: entered promiscuous mode [ 357.027268][T28246] veth0_macvtap: entered promiscuous mode [ 357.119984][T28246] veth1_macvtap: entered promiscuous mode [ 357.133139][T28246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.146485][T28246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.158884][ T4631] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.173449][ T4631] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.192948][ T4631] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.203525][ T4631] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.266568][T28400] cgroup: Unknown subsys name 'cpuset' [ 357.462966][T28411] macvtap0: refused to change device tx_queue_len [ 357.728859][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 357.728878][ T30] audit: type=1326 audit(344.953:12101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28425 comm="syz.9.10294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x0 [ 357.762043][T28428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10290'. [ 357.805654][T28430] C: renamed from team_slave_0 [ 357.841015][T28430] netlink: 'syz.6.10295': attribute type 1 has an invalid length. [ 357.848989][T28430] netlink: 152 bytes leftover after parsing attributes in process `syz.6.10295'. [ 357.858260][T28430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 357.917211][T28436] netlink: 'syz.6.10297': attribute type 3 has an invalid length. [ 358.016686][ T30] audit: type=1326 audit(345.224:12102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28443 comm="syz.6.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f91d2ebe9 code=0x7ffc0000 [ 358.059271][ T30] audit: type=1326 audit(345.243:12103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28443 comm="syz.6.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f2f91d2ebe9 code=0x7ffc0000 [ 358.082404][ T30] audit: type=1326 audit(345.243:12104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28443 comm="syz.6.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f91d2ebe9 code=0x7ffc0000 [ 358.105542][ T30] audit: type=1326 audit(345.243:12105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28443 comm="syz.6.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f91d2ebe9 code=0x7ffc0000 [ 358.451561][ T30] audit: type=1400 audit(345.626:12106): avc: denied { cmd } for pid=28473 comm="syz.8.10313" path="socket:[93098]" dev="sockfs" ino=93098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 358.518504][ T30] audit: type=1326 audit(345.683:12107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28479 comm="syz.8.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 358.541800][ T30] audit: type=1326 audit(345.683:12108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28479 comm="syz.8.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 358.565084][ T30] audit: type=1326 audit(345.692:12109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28479 comm="syz.8.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 358.588174][ T30] audit: type=1326 audit(345.692:12110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28479 comm="syz.8.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ab556ec23 code=0x7ffc0000 [ 358.598405][T28487] netlink: 'syz.6.10318': attribute type 10 has an invalid length. [ 358.626107][T28487] netlink: 'syz.6.10318': attribute type 10 has an invalid length. [ 358.653595][T28490] tipc: Started in network mode [ 358.658616][T28490] tipc: Node identity ac14140f, cluster identity 4711 [ 358.665800][T28490] tipc: New replicast peer: 255.255.255.255 [ 358.672045][T28490] tipc: Enabled bearer , priority 10 [ 358.680127][T28490] netlink: 340 bytes leftover after parsing attributes in process `syz.9.10319'. [ 359.590681][T28523] tipc: Enabled bearer , priority 0 [ 359.612347][T28523] tipc: Disabling bearer [ 359.788978][T28535] tipc: New replicast peer: 255.255.255.83 [ 359.795456][T28535] tipc: Enabled bearer , priority 10 [ 359.855437][T28544] netlink: 100 bytes leftover after parsing attributes in process `syz.9.10340'. [ 360.073142][T28562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10346'. [ 360.082287][T28562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10346'. [ 360.611177][T28599] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 360.794378][ T36] tipc: Node number set to 2886997007 [ 361.053705][T28619] lo speed is unknown, defaulting to 1000 [ 361.060745][T28619] lo speed is unknown, defaulting to 1000 [ 361.286027][T28628] loop9: detected capacity change from 0 to 8192 [ 361.452128][T28652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10387'. [ 361.480958][T28654] bond0: entered promiscuous mode [ 361.486052][T28654] bond_slave_0: entered promiscuous mode [ 361.491902][T28654] bond_slave_1: entered promiscuous mode [ 361.497667][T28654] bond0: entered allmulticast mode [ 361.502870][T28654] bond_slave_0: entered allmulticast mode [ 361.508620][T28654] bond_slave_1: entered allmulticast mode [ 361.591433][T28663] netlink: 'syz.6.10393': attribute type 7 has an invalid length. [ 361.599458][T28663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10393'. [ 362.221770][T28738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10428'. [ 362.435066][T28743] loop9: detected capacity change from 0 to 8192 [ 362.515790][T28758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10436'. [ 362.533149][T28760] netlink: '+}[@': attribute type 1 has an invalid length. [ 362.540585][T28758] netem: change failed [ 362.552058][T28760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.662442][T28776] rdma_rxe: rxe_newlink: failed to add syz_tun [ 363.416713][T28839] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10472'. [ 363.535862][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 363.535878][ T30] audit: type=1326 audit(350.388:12247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 363.670212][ T30] audit: type=1326 audit(350.425:12248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 363.694228][ T30] audit: type=1326 audit(350.425:12249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e8a78ec23 code=0x7ffc0000 [ 363.717466][ T30] audit: type=1326 audit(350.425:12250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e8a78ec23 code=0x7ffc0000 [ 363.741011][ T30] audit: type=1326 audit(350.425:12251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 363.764544][ T30] audit: type=1326 audit(350.425:12252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 363.787646][ T30] audit: type=1326 audit(350.425:12253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 363.811199][ T30] audit: type=1326 audit(350.425:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 363.834956][ T30] audit: type=1326 audit(350.425:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 363.858147][ T30] audit: type=1326 audit(350.434:12256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28849 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 363.903412][T28864] netlink: 'syz.3.10482': attribute type 2 has an invalid length. [ 363.911298][T28864] netlink: 'syz.3.10482': attribute type 1 has an invalid length. [ 363.919160][T28864] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.10482'. [ 364.006972][T28874] lo speed is unknown, defaulting to 1000 [ 364.014073][T28874] lo speed is unknown, defaulting to 1000 [ 364.282629][T28890] loop9: detected capacity change from 0 to 1024 [ 364.323939][T28890] EXT4-fs: inline encryption not supported [ 364.350153][T28890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.478130][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.784700][T28943] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10518'. [ 364.801673][T28943] bridge0: entered promiscuous mode [ 364.807395][T28943] bridge0: port 2(macvlan2) entered blocking state [ 364.814028][T28943] bridge0: port 2(macvlan2) entered disabled state [ 364.820915][T28943] macvlan2: entered allmulticast mode [ 364.826405][T28943] bridge0: entered allmulticast mode [ 364.832446][T28943] macvlan2: left allmulticast mode [ 364.837753][T28943] bridge0: left allmulticast mode [ 364.847889][T28943] bridge0: left promiscuous mode [ 364.931000][T28953] netlink: 'syz.6.10521': attribute type 298 has an invalid length. [ 365.011350][T28964] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28964 comm=syz.9.10526 [ 365.024608][T28964] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28964 comm=syz.9.10526 [ 365.387240][T28984] loop9: detected capacity change from 0 to 8192 [ 365.410522][T28977] tipc: Enabled bearer , priority 10 [ 365.440162][T28984] bio_check_eod: 5 callbacks suppressed [ 365.440182][T28984] syz.9.10537: attempt to access beyond end of device [ 365.440182][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.459408][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.483757][T28984] syz.9.10537: attempt to access beyond end of device [ 365.483757][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.497348][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.509035][T28984] syz.9.10537: attempt to access beyond end of device [ 365.509035][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.522788][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.554028][T28984] syz.9.10537: attempt to access beyond end of device [ 365.554028][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.567717][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.590698][T28984] syz.9.10537: attempt to access beyond end of device [ 365.590698][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.605117][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.630397][T28984] syz.9.10537: attempt to access beyond end of device [ 365.630397][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.643986][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.652800][T28984] syz.9.10537: attempt to access beyond end of device [ 365.652800][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.666572][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.675264][T28994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10541'. [ 365.685389][T28984] syz.9.10537: attempt to access beyond end of device [ 365.685389][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.699052][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.707653][T28984] syz.9.10537: attempt to access beyond end of device [ 365.707653][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.721277][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 365.759301][T28984] syz.9.10537: attempt to access beyond end of device [ 365.759301][T28984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 365.772886][T28984] Buffer I/O error on dev loop9, logical block 57847, async page read [ 366.599365][ T3389] tipc: Node number set to 2886997007 [ 366.904821][T29053] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10566'. [ 367.036369][T29064] netlink: 180 bytes leftover after parsing attributes in process `syz.8.10570'. [ 367.047774][T29064] netlink: 180 bytes leftover after parsing attributes in process `syz.8.10570'. [ 367.184540][T29074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10576'. [ 367.286645][T29085] lo speed is unknown, defaulting to 1000 [ 367.293674][T29085] lo speed is unknown, defaulting to 1000 [ 367.372654][T29090] lo speed is unknown, defaulting to 1000 [ 367.407188][T29097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10585'. [ 367.408612][T29090] lo speed is unknown, defaulting to 1000 [ 367.438879][T29097] bridge0: entered promiscuous mode [ 367.455579][T29097] bridge0: port 1(macvlan2) entered blocking state [ 367.462208][T29097] bridge0: port 1(macvlan2) entered disabled state [ 367.474305][T29097] macvlan2: entered allmulticast mode [ 367.479976][T29097] bridge0: entered allmulticast mode [ 367.489342][T29097] macvlan2: left allmulticast mode [ 367.494510][T29097] bridge0: left allmulticast mode [ 367.500062][T29097] bridge0: left promiscuous mode [ 367.548929][T29102] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10587'. [ 368.731007][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10629'. [ 368.783232][T29199] program syz.9.10628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.794763][T29199] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 368.875173][T29211] loop9: detected capacity change from 0 to 2048 [ 368.940997][T29211] loop9: p1 < > p4 [ 368.945327][T29211] loop9: p4 size 8388608 extends beyond EOD, truncated [ 369.228373][T29231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10642'. [ 369.446642][T29183] 9pnet_fd: p9_fd_create_tcp (29183): problem connecting socket to 127.0.0.1 [ 369.610330][T29245] lo speed is unknown, defaulting to 1000 [ 369.616926][T29245] lo speed is unknown, defaulting to 1000 [ 369.694482][T29245] lo speed is unknown, defaulting to 1000 [ 369.702680][T29245] lo speed is unknown, defaulting to 1000 [ 369.729415][T29253] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10648'. [ 369.756269][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 369.756294][ T30] audit: type=1326 audit(356.206:12438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.797130][ T30] audit: type=1326 audit(356.234:12439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.820449][ T30] audit: type=1326 audit(356.234:12440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.843870][ T30] audit: type=1326 audit(356.234:12441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.867078][ T30] audit: type=1326 audit(356.234:12442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.890793][ T30] audit: type=1326 audit(356.234:12443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.914062][ T30] audit: type=1326 audit(356.234:12444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.937158][ T30] audit: type=1326 audit(356.234:12445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.960344][ T30] audit: type=1326 audit(356.234:12446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 369.983550][ T30] audit: type=1326 audit(356.234:12447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.8.10650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 370.079909][T29271] hub 9-0:1.0: USB hub found [ 370.091745][T29271] hub 9-0:1.0: 8 ports detected [ 370.171498][T29284] bridge: RTM_NEWNEIGH with invalid ether address [ 370.276446][T29297] loop3: detected capacity change from 0 to 2048 [ 370.320860][T29297] loop3: p1 < > p4 [ 370.330873][T29297] loop3: p4 size 8388608 extends beyond EOD, truncated [ 370.784077][T29349] netlink: 'syz.1.10694': attribute type 1 has an invalid length. [ 370.802640][T29349] 8021q: adding VLAN 0 to HW filter on device bond6 [ 370.821459][T29345] lo speed is unknown, defaulting to 1000 [ 370.836180][T29345] lo speed is unknown, defaulting to 1000 [ 370.859062][T29349] 8021q: adding VLAN 0 to HW filter on device bond6 [ 370.877940][T29349] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 370.890473][T29349] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 371.228201][T29386] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10710'. [ 371.502948][T29408] lo speed is unknown, defaulting to 1000 [ 371.513200][T29408] lo speed is unknown, defaulting to 1000 [ 371.818525][T29435] netlink: 'syz.3.10731': attribute type 1 has an invalid length. [ 371.856521][T29435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.881415][T29435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.923810][T29435] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 371.936002][T29435] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 372.121654][T29447] 9pnet_fd: p9_fd_create_tcp (29447): problem connecting socket to 127.0.0.1 [ 372.243069][T29468] lo speed is unknown, defaulting to 1000 [ 372.250162][T29468] lo speed is unknown, defaulting to 1000 [ 372.526825][T29500] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 372.959878][T29531] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10773'. [ 373.021419][T29537] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10776'. [ 373.039711][T29539] netlink: 'syz.9.10778': attribute type 21 has an invalid length. [ 373.090081][T29547] loop9: detected capacity change from 0 to 512 [ 373.106841][T29547] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 373.135405][T29549] lo speed is unknown, defaulting to 1000 [ 373.140265][T29547] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.10781: bg 0: block 4: invalid block bitmap [ 373.142470][T29549] lo speed is unknown, defaulting to 1000 [ 373.155709][T29547] EXT4-fs (loop9): Remounting filesystem read-only [ 373.166466][T29547] EXT4-fs (loop9): 1 truncate cleaned up [ 373.172739][T29547] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.215615][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.268502][T29562] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 373.444197][T29592] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 373.587996][T29617] pimreg: entered allmulticast mode [ 373.597725][T29617] pimreg: left allmulticast mode [ 373.611443][T29619] netlink: 'syz.1.10815': attribute type 10 has an invalid length. [ 373.626535][T29619] team0: Port device dummy0 added [ 373.634012][T29619] netlink: 'syz.1.10815': attribute type 10 has an invalid length. [ 373.642710][T29619] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 373.671549][T29619] team0: Failed to send options change via netlink (err -105) [ 373.702073][T29619] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 373.714210][T29619] team0: Port device dummy0 removed [ 373.737281][T29631] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10819'. [ 373.816695][T29645] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10825'. [ 374.126031][T29676] netlink: 'syz.3.10839': attribute type 21 has an invalid length. [ 374.533836][T29738] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10869'. [ 374.552365][T29698] netlink: 'syz.9.10850': attribute type 21 has an invalid length. [ 374.560530][T29698] netlink: 164 bytes leftover after parsing attributes in process `syz.9.10850'. [ 374.932281][T29762] lo speed is unknown, defaulting to 1000 [ 374.949606][T29762] lo speed is unknown, defaulting to 1000 [ 374.988689][T29764] loop9: detected capacity change from 0 to 1024 [ 375.017506][T29764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.102519][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.126235][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 375.126255][ T30] audit: type=1326 audit(361.220:12531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.169843][ T30] audit: type=1326 audit(361.220:12532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.193467][ T30] audit: type=1326 audit(361.220:12533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.216697][ T30] audit: type=1326 audit(361.220:12534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.239988][ T30] audit: type=1326 audit(361.220:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.264101][ T30] audit: type=1326 audit(361.220:12536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.287740][ T30] audit: type=1326 audit(361.220:12537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.311314][ T30] audit: type=1326 audit(361.220:12538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.334528][ T30] audit: type=1326 audit(361.238:12539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.358438][ T30] audit: type=1326 audit(361.238:12540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29782 comm="syz.8.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 375.427973][T29798] pimreg: entered allmulticast mode [ 375.437772][T29798] pimreg: left allmulticast mode [ 375.540498][T29818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10901'. [ 375.549867][T29818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10901'. [ 375.617882][T29828] vlan0: entered allmulticast mode [ 375.624431][T29828] dummy0: entered allmulticast mode [ 375.755092][T29830] wg2: entered promiscuous mode [ 375.760016][T29830] wg2: entered allmulticast mode [ 376.314509][T29892] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10933'. [ 376.476098][T29905] lo speed is unknown, defaulting to 1000 [ 376.511463][T29905] lo speed is unknown, defaulting to 1000 [ 376.817777][T29935] loop3: detected capacity change from 0 to 2048 [ 376.838945][T29918] loop9: detected capacity change from 0 to 512 [ 376.852135][T29918] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.858650][T29918] EXT4-fs: Ignoring removed bh option [ 376.868011][T29937] lo speed is unknown, defaulting to 1000 [ 376.876118][T29937] lo speed is unknown, defaulting to 1000 [ 376.876622][T29935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.896605][T29918] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 376.949745][T29918] EXT4-fs (loop9): 1 truncate cleaned up [ 376.961897][T29918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.123129][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.148428][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.191978][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10967'. [ 377.201414][T29966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.209169][T29966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.217216][T29966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.224657][T29966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.386510][T29984] loop9: detected capacity change from 0 to 512 [ 377.395447][T29984] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.411027][T29984] EXT4-fs error (device loop9): ext4_readdir:264: inode #12: block 32: comm syz.9.10976: path /157/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 377.456802][T29984] EXT4-fs (loop9): Remounting filesystem read-only [ 377.567264][T30004] loop3: detected capacity change from 0 to 1024 [ 377.575540][T30004] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 377.585479][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.750439][T30029] loop9: detected capacity change from 0 to 512 [ 377.757188][T30029] EXT4-fs: Ignoring removed bh option [ 377.764396][T30029] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.773621][T30029] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 377.783955][T30029] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 377.793485][T30029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 377.802162][T30029] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.827248][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.863979][T30036] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 377.890356][T30038] loop9: detected capacity change from 0 to 512 [ 377.897167][T30038] EXT4-fs: Ignoring removed oldalloc option [ 377.905353][T30038] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.11000: Parent and EA inode have the same ino 15 [ 377.919483][T30038] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.11000: Parent and EA inode have the same ino 15 [ 377.934152][T30038] EXT4-fs (loop9): 1 orphan inode deleted [ 377.940387][T30038] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.967110][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.198279][T30066] netlink: 'syz.6.11012': attribute type 3 has an invalid length. [ 378.267407][T30076] loop9: detected capacity change from 0 to 1024 [ 378.290365][T30076] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.321495][T30076] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.11017: Allocating blocks 449-513 which overlap fs metadata [ 378.348334][T30075] EXT4-fs (loop9): pa ffff888106e11d90: logic 48, phys. 177, len 21 [ 378.356418][T30075] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 378.382190][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.510219][T30089] netlink: 'syz.6.11022': attribute type 39 has an invalid length. [ 378.654259][T30091] SELinux: failed to load policy [ 378.992290][T30111] netlink: 100 bytes leftover after parsing attributes in process `syz.8.11031'. [ 379.100985][T30121] geneve0: entered allmulticast mode [ 379.106617][T30121] geneve0: entered promiscuous mode [ 379.180747][T30113] wg2: entered promiscuous mode [ 379.185762][T30113] wg2: entered allmulticast mode [ 379.201980][T30120] geneve0: left promiscuous mode [ 379.207189][T30120] geneve0: left allmulticast mode [ 379.336021][T30134] loop9: detected capacity change from 0 to 2048 [ 379.369732][T30134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.421313][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.607086][T30161] netlink: 'syz.9.11054': attribute type 13 has an invalid length. [ 379.653028][T30161] bond0: left promiscuous mode [ 379.657887][T30161] bond_slave_0: left promiscuous mode [ 379.663517][T30161] bond_slave_1: left promiscuous mode [ 379.669083][T30161] bond0: left allmulticast mode [ 379.674004][T30161] bond_slave_0: left allmulticast mode [ 379.679491][T30161] bond_slave_1: left allmulticast mode [ 379.692139][T30161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.776597][T30172] loop9: detected capacity change from 0 to 1024 [ 379.783814][T30172] EXT4-fs: Ignoring removed orlov option [ 379.792159][T30172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.934357][T30179] netlink: zone id is out of range [ 380.014660][T30187] netlink: 'syz.8.11063': attribute type 15 has an invalid length. [ 380.022733][T30187] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11063'. [ 380.050549][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11064'. [ 380.061215][T30189] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11064'. [ 380.100899][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.274799][T30215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11075'. [ 380.305992][T30221] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 380.347838][T30229] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11081'. [ 380.357059][T30229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.364988][T30229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.373003][T30229] batman_adv: batadv0: Removing interface: macvlan0 [ 380.489564][ T30] kauditd_printk_skb: 287 callbacks suppressed [ 380.489583][ T30] audit: type=1326 audit(366.243:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 380.624925][ T30] audit: type=1326 audit(366.243:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 380.648219][ T30] audit: type=1326 audit(366.243:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 380.671572][ T30] audit: type=1326 audit(366.243:12831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ab556ec23 code=0x7ffc0000 [ 380.694599][ T30] audit: type=1326 audit(366.243:12832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0ab556d69f code=0x7ffc0000 [ 380.717817][ T30] audit: type=1326 audit(366.243:12833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0ab556ec77 code=0x7ffc0000 [ 380.741357][ T30] audit: type=1326 audit(366.271:12834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ab556d550 code=0x7ffc0000 [ 380.764861][ T30] audit: type=1326 audit(366.271:12835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0ab556d84a code=0x7ffc0000 [ 380.787879][ T30] audit: type=1326 audit(366.271:12836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 380.811178][ T30] audit: type=1326 audit(366.280:12837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30238 comm="syz.8.11083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab556ebe9 code=0x7ffc0000 [ 380.910066][T30268] netlink: 'syz.9.11095': attribute type 39 has an invalid length. [ 380.926418][T30269] ipvlan2: entered promiscuous mode [ 380.932906][T30269] bridge0: port 4(ipvlan2) entered blocking state [ 380.939535][T30269] bridge0: port 4(ipvlan2) entered disabled state [ 380.946503][T30269] ipvlan2: entered allmulticast mode [ 380.951844][T30269] bridge0: entered allmulticast mode [ 380.958182][T30269] ipvlan2: left allmulticast mode [ 380.963344][T30269] bridge0: left allmulticast mode [ 381.818199][T30295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11106'. [ 381.836570][T30295] batadv0 (unregistering): left allmulticast mode [ 381.843196][T30295] batadv0 (unregistering): left promiscuous mode [ 381.849880][T30295] bridge0: port 3(batadv0) entered disabled state [ 381.885126][T30306] loop9: detected capacity change from 0 to 128 [ 381.915302][T30308] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 381.943548][T30310] loop9: detected capacity change from 0 to 128 [ 381.965006][T30310] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.082914][T28246] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.168937][T30331] SELinux: failed to load policy [ 382.384972][T30352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11133'. [ 382.394841][T30352] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11133'. [ 382.483683][T30357] netlink: 'syz.1.11135': attribute type 39 has an invalid length. [ 382.562084][T30363] lo speed is unknown, defaulting to 1000 [ 382.568908][T30363] lo speed is unknown, defaulting to 1000 [ 383.137291][T30406] lo speed is unknown, defaulting to 1000 [ 383.148835][T30406] lo speed is unknown, defaulting to 1000 [ 383.213203][T30421] netlink: 'syz.3.11161': attribute type 27 has an invalid length. [ 383.264062][ T3389] lo speed is unknown, defaulting to 1000 [ 383.269917][ T3389] syz2: Port: 1 Link DOWN [ 383.403964][T30435] loop3: detected capacity change from 0 to 2048 [ 383.434779][T30435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.474592][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.615417][T30461] netlink: 'syz.6.11179': attribute type 1 has an invalid length. [ 383.631557][T30461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.650448][T30461] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 383.670987][T30461] bond0: (slave batadv1): making interface the new active one [ 383.680154][T30461] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 383.876027][T30477] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11186'. [ 383.909883][T30481] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11187'. [ 383.919006][T30481] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11187'. [ 383.946152][T30483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11188'. [ 383.956272][T30483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11188'. [ 383.991291][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11191'. [ 384.440696][T30509] netlink: 'syz.3.11200': attribute type 39 has an invalid length. [ 384.574883][T30514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11201'. [ 384.584014][T30514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11201'. [ 384.732352][T30537] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11209'. [ 384.866761][T30566] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11211'. [ 384.976857][T30583] netlink: 'syz.1.11227': attribute type 1 has an invalid length. [ 385.000237][T30583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.021320][T30583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.030321][T30583] bond7: (slave batadv0): making interface the new active one [ 385.039611][T30583] bond7: (slave batadv0): Enslaving as an active interface with an up link [ 385.170284][T30602] loop3: detected capacity change from 0 to 256 [ 385.241359][T30616] netlink: 'syz.8.11242': attribute type 1 has an invalid length. [ 385.263118][T30616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.287627][T30616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.297483][T30616] bond2: (slave batadv0): making interface the new active one [ 385.306493][T30616] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 385.769243][T30660] netlink: 'syz.8.11259': attribute type 12 has an invalid length. [ 386.155228][T30681] IPv4: Oversized IP packet from 127.202.26.0 [ 386.727106][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 386.727124][ T30] audit: type=1326 audit(372.070:12921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 386.792787][ T30] audit: type=1326 audit(372.108:12922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 386.815903][ T30] audit: type=1326 audit(372.117:12923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 386.839072][ T30] audit: type=1326 audit(372.117:12924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 386.862261][ T30] audit: type=1326 audit(372.117:12925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e8a7c14a5 code=0x7ffc0000 [ 386.885505][ T30] audit: type=1326 audit(372.126:12926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 386.908809][ T30] audit: type=1326 audit(372.126:12927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 386.932043][ T30] audit: type=1326 audit(372.126:12928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 386.955169][ T30] audit: type=1326 audit(372.126:12929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 386.978323][ T30] audit: type=1326 audit(372.136:12930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.1.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 387.162328][T30713] loop9: detected capacity change from 0 to 1024 [ 387.183144][T30716] bridge0: port 2(macvtap0) entered blocking state [ 387.189784][T30716] bridge0: port 2(macvtap0) entered disabled state [ 387.231753][T30716] macvtap0: entered allmulticast mode [ 387.237243][T30716] bridge0: entered allmulticast mode [ 387.258599][T30716] macvtap0: left allmulticast mode [ 387.263780][T30716] bridge0: left allmulticast mode [ 387.384691][ T4639] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.617367][T30748] veth1_to_bond: entered allmulticast mode [ 387.683536][T30748] bond0: (slave bond_slave_1): Releasing backup interface [ 387.726015][T30748] veth1_to_bond (unregistering): left allmulticast mode [ 387.812031][T30759] netlink: 'syz.3.11304': attribute type 1 has an invalid length. [ 387.977120][T30731] Set syz1 is full, maxelem 65536 reached [ 388.133397][T30786] netlink: 'syz.1.11316': attribute type 12 has an invalid length. [ 388.200074][T30791] netlink: 'syz.6.11329': attribute type 12 has an invalid length. [ 388.540675][T30802] lo speed is unknown, defaulting to 1000 [ 388.558641][T30802] lo speed is unknown, defaulting to 1000 [ 388.695801][T30835] IPv4: Oversized IP packet from 127.202.26.0 [ 389.401224][T30895] netlink: 'syz.8.11362': attribute type 3 has an invalid length. [ 389.490834][T30897] netlink: 'syz.8.11363': attribute type 3 has an invalid length. [ 389.691935][T30879] Set syz1 is full, maxelem 65536 reached [ 389.913343][T30921] atomic_op ffff888119b5ad28 conn xmit_atomic 0000000000000000 [ 389.972940][T30893] lo speed is unknown, defaulting to 1000 [ 389.979356][T30893] lo speed is unknown, defaulting to 1000 [ 390.007000][T30928] sch_fq: defrate 6 ignored. [ 390.023783][T30930] __nla_validate_parse: 20 callbacks suppressed [ 390.023798][T30930] netlink: 664 bytes leftover after parsing attributes in process `syz.3.11378'. [ 390.087405][T30933] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11379'. [ 390.135397][T30938] netlink: 5448 bytes leftover after parsing attributes in process `syz.9.11379'. [ 390.583454][T30972] netlink: 664 bytes leftover after parsing attributes in process `syz.1.11393'. [ 390.680182][T30974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11395'. [ 390.744300][T30974] netlink: 5448 bytes leftover after parsing attributes in process `syz.1.11395'. [ 390.817101][T30982] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11399'. [ 391.047885][T30996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11405'. [ 391.313970][T30992] lo speed is unknown, defaulting to 1000 [ 391.329428][T30992] lo speed is unknown, defaulting to 1000 [ 391.608355][T31025] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11419'. [ 391.887664][T31053] pim6reg: entered allmulticast mode [ 391.905634][T31053] pim6reg: left allmulticast mode [ 391.922284][T31059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11435'. [ 391.932128][T31057] ipvlan1: entered allmulticast mode [ 391.937513][T31057] veth0_vlan: entered allmulticast mode [ 391.958405][T31057] ipvlan1: left allmulticast mode [ 391.963550][T31057] veth0_vlan: left allmulticast mode [ 392.013847][T31065] pimreg: entered allmulticast mode [ 392.092966][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 392.092985][ T30] audit: type=1326 audit(377.093:13043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.122981][ T30] audit: type=1326 audit(377.093:13044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.146169][ T30] audit: type=1326 audit(377.131:13045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.190001][ T30] audit: type=1326 audit(377.131:13046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.213211][ T30] audit: type=1326 audit(377.131:13047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.236328][ T30] audit: type=1326 audit(377.131:13048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.259471][ T30] audit: type=1326 audit(377.131:13049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.282804][ T30] audit: type=1326 audit(377.131:13050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.306004][ T30] audit: type=1326 audit(377.168:13051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.329274][ T30] audit: type=1326 audit(377.168:13052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31070 comm="syz.9.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 392.417751][T31089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.426407][T31089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.236119][T31133] lo speed is unknown, defaulting to 1000 [ 393.264511][T31133] lo speed is unknown, defaulting to 1000 [ 393.367401][T31140] loop3: detected capacity change from 0 to 2048 [ 393.532874][T31140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.908020][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.083309][T31165] bridge0: port 2(vlan0) entered blocking state [ 394.089948][T31165] bridge0: port 2(vlan0) entered disabled state [ 394.100289][T31165] vlan0: entered allmulticast mode [ 394.105476][T31165] bridge0: entered allmulticast mode [ 394.121207][T31165] vlan0: left allmulticast mode [ 394.126127][T31165] bridge0: left allmulticast mode [ 394.162005][T31173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31173 comm=syz.1.11484 [ 394.174756][T31173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31173 comm=syz.1.11484 [ 394.297660][T31170] lo speed is unknown, defaulting to 1000 [ 394.307268][T31170] lo speed is unknown, defaulting to 1000 [ 394.916538][T31212] loop9: detected capacity change from 0 to 128 [ 394.969064][T31212] bio_check_eod: 4859 callbacks suppressed [ 394.969081][T31212] syz.9.11501: attempt to access beyond end of device [ 394.969081][T31212] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 395.029277][T31221] netlink: 'syz.3.11504': attribute type 27 has an invalid length. [ 395.078427][T31221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.087018][T31221] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.104792][T31221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.120451][ T36] lo speed is unknown, defaulting to 1000 [ 395.126310][ T36] syz2: Port: 1 Link ACTIVE [ 395.653445][T31296] __nla_validate_parse: 6 callbacks suppressed [ 395.653467][T31296] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11539'. [ 396.398796][T31325] lo speed is unknown, defaulting to 1000 [ 396.405356][T31325] lo speed is unknown, defaulting to 1000 [ 396.690453][T31336] loop9: detected capacity change from 0 to 128 [ 396.731235][T31336] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 396.739477][T31336] FAT-fs (loop9): Filesystem has been set read-only [ 396.786709][T31336] syz.9.11556: attempt to access beyond end of device [ 396.786709][T31336] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 396.834201][T31336] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 396.842113][T31336] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 396.910563][T31336] syz.9.11556: attempt to access beyond end of device [ 396.910563][T31336] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 396.968403][T31336] syz.9.11556: attempt to access beyond end of device [ 396.968403][T31336] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 397.006384][T31336] syz.9.11556: attempt to access beyond end of device [ 397.006384][T31336] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 397.020173][T31336] syz.9.11556: attempt to access beyond end of device [ 397.020173][T31336] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 397.033627][T31336] syz.9.11556: attempt to access beyond end of device [ 397.033627][T31336] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 397.057204][T31336] syz.9.11556: attempt to access beyond end of device [ 397.057204][T31336] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 397.089969][T31336] syz.9.11556: attempt to access beyond end of device [ 397.089969][T31336] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 397.133267][T31336] syz.9.11556: attempt to access beyond end of device [ 397.133267][T31336] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 397.803272][T31388] bridge: RTM_NEWNEIGH with invalid ether address [ 397.878948][T31395] loop9: detected capacity change from 0 to 2048 [ 397.940558][T31403] netlink: 'syz.3.11585': attribute type 27 has an invalid length. [ 398.030568][T31412] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11588'. [ 398.046419][T12096] lo speed is unknown, defaulting to 1000 [ 398.064499][T31407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.083695][T31407] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.104665][T31407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.125964][ T3389] lo speed is unknown, defaulting to 1000 [ 398.287891][T31427] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11596'. [ 398.319267][T31427] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11596'. [ 398.486696][T31440] loop9: detected capacity change from 0 to 128 [ 398.527108][T31440] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 398.718354][T28246] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.808731][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 398.808753][ T30] audit: type=1326 audit(383.361:13140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.11608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 398.838345][ T30] audit: type=1326 audit(383.361:13141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.11608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 398.861500][ T30] audit: type=1326 audit(383.361:13142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.11608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 398.884687][ T30] audit: type=1326 audit(383.361:13143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.11608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 398.908361][ T30] audit: type=1326 audit(383.361:13144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.11608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1a1ebe9 code=0x7ffc0000 [ 399.080026][ T30] audit: type=1326 audit(383.632:13145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31489 comm="syz.8.11620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ab556ebe9 code=0x0 [ 399.269707][T31502] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11625'. [ 399.446436][T31517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11630'. [ 399.457871][T31519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11631'. [ 399.474199][T31519] hsr_slave_1 (unregistering): left promiscuous mode [ 399.534893][T31523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.543584][T31523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.670614][T31529] loop9: detected capacity change from 0 to 1024 [ 399.701359][T31529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.723201][T31529] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 399.760589][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.884757][T31539] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11641'. [ 399.965360][T31543] vlan2: entered allmulticast mode [ 400.067181][T31551] ip6gre1: entered allmulticast mode [ 400.124695][ T30] audit: type=1326 audit(384.605:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31556 comm="syz.3.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 400.210804][ T30] audit: type=1326 audit(384.642:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31556 comm="syz.3.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 400.233943][ T30] audit: type=1326 audit(384.642:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31556 comm="syz.3.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 400.257150][ T30] audit: type=1326 audit(384.642:13149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31556 comm="syz.3.11650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 400.331872][T31565] lo speed is unknown, defaulting to 1000 [ 400.340780][T31565] lo speed is unknown, defaulting to 1000 [ 400.499578][T31566] lo speed is unknown, defaulting to 1000 [ 400.506088][T31566] lo speed is unknown, defaulting to 1000 [ 400.876424][T31605] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11679'. [ 401.025505][T31611] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.11672'. [ 401.286352][T31623] program syz.3.11678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.445516][T31635] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11684'. [ 401.484997][T31639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11686'. [ 401.494194][T31639] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11686'. [ 401.503243][T31639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11686'. [ 401.529448][T31639] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11686'. [ 401.538707][T31639] netlink: 'syz.6.11686': attribute type 6 has an invalid length. [ 401.936482][T31654] IPVS: stopping backup sync thread 23099 ... [ 402.330455][T31663] serio: Serial port ptm0 [ 402.567710][T31683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11704'. [ 402.577065][T31683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11704'. [ 402.651295][T31696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.659968][T31696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.292711][T31712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11720'. [ 403.304597][T31712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11720'. [ 403.394394][T31714] random: crng reseeded on system resumption [ 403.617242][T31728] lo speed is unknown, defaulting to 1000 [ 403.624511][T31728] lo speed is unknown, defaulting to 1000 [ 404.111787][T31768] lo speed is unknown, defaulting to 1000 [ 404.119942][T31768] lo speed is unknown, defaulting to 1000 [ 404.210293][T31772] loop3: detected capacity change from 0 to 128 [ 404.222441][T31772] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.257596][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 404.257634][ T30] audit: type=1326 audit(388.477:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.315809][ T30] audit: type=1326 audit(388.477:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.339012][ T30] audit: type=1326 audit(388.477:13251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.362171][ T30] audit: type=1326 audit(388.477:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.385421][ T30] audit: type=1326 audit(388.487:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.408592][ T30] audit: type=1326 audit(388.487:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.431719][ T30] audit: type=1326 audit(388.487:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.454812][ T30] audit: type=1326 audit(388.487:13256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.477891][ T30] audit: type=1326 audit(388.505:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.501038][ T30] audit: type=1326 audit(388.524:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31771 comm="syz.3.11748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 404.526190][T12352] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.639467][T31790] netlink: 'syz.3.11753': attribute type 27 has an invalid length. [ 404.670174][T12096] lo speed is unknown, defaulting to 1000 [ 404.675960][T12096] syz2: Port: 1 Link DOWN [ 406.576283][T31964] __nla_validate_parse: 10 callbacks suppressed [ 406.576382][T31964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11829'. [ 406.633339][T31973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11831'. [ 407.532907][T32019] netlink: 'syz.3.11850': attribute type 30 has an invalid length. [ 407.648664][T32029] loop9: detected capacity change from 0 to 1024 [ 407.659696][T32029] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.11852: Failed to acquire dquot type 0 [ 407.669196][T32030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11854'. [ 407.671702][T32029] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 407.697836][T32029] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.11852: corrupted inode contents [ 407.710145][T32029] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #13: comm syz.9.11852: mark_inode_dirty error [ 407.725904][T32029] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.11852: corrupted inode contents [ 407.740247][T32029] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.11852: mark_inode_dirty error [ 407.752139][T32029] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.11852: corrupted inode contents [ 407.766366][T32029] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 407.775290][T32029] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.11852: corrupted inode contents [ 407.789283][T32029] EXT4-fs error (device loop9): ext4_truncate:4666: inode #13: comm syz.9.11852: mark_inode_dirty error [ 407.800856][T32029] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 407.814173][T32029] EXT4-fs (loop9): 1 truncate cleaned up [ 407.820513][T32029] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.866416][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.337148][T32064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11869'. [ 408.700048][T32091] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11880'. [ 408.743087][T32091] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11880'. [ 409.436639][T32143] netlink: 2020 bytes leftover after parsing attributes in process `syz.1.11901'. [ 409.445925][T32143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11901'. [ 409.841332][T32157] loop3: detected capacity change from 0 to 1024 [ 409.851122][T32157] EXT4-fs: Ignoring removed oldalloc option [ 409.859553][T32157] EXT4-fs: Ignoring removed orlov option [ 409.877089][T32157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.917685][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.955599][T32164] netlink: 'syz.9.11910': attribute type 27 has an invalid length. [ 409.957669][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 409.957721][ T30] audit: type=1326 audit(393.800:13363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 409.993259][ T30] audit: type=1326 audit(393.818:13364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.016561][ T30] audit: type=1326 audit(393.818:13365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.039689][ T30] audit: type=1326 audit(393.818:13366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.062985][ T30] audit: type=1326 audit(393.818:13367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.086233][ T30] audit: type=1326 audit(393.818:13368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.109342][ T30] audit: type=1326 audit(393.818:13369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.133083][ T30] audit: type=1326 audit(393.977:13370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.156265][ T30] audit: type=1326 audit(393.977:13371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.192234][ T30] audit: type=1326 audit(393.977:13372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32165 comm="syz.3.11911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 410.220670][T32164] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.227938][T32164] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.287425][T32173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11914'. [ 410.308114][T32164] ip6gre1: left allmulticast mode [ 410.333349][T32167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.342160][T32167] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.351839][T32167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.382082][ T4623] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.391343][T32175] netlink: 'syz.1.11913': attribute type 30 has an invalid length. [ 410.391870][ T4623] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.418037][T32169] lo speed is unknown, defaulting to 1000 [ 410.423981][ T4623] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.445891][T32169] lo speed is unknown, defaulting to 1000 [ 410.535514][T32189] tipc: Enabling of bearer rejected, failed to enable media [ 410.677786][T32203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11925'. [ 411.268435][T32228] lo speed is unknown, defaulting to 1000 [ 411.297400][T32234] wireguard0: entered promiscuous mode [ 411.302964][T32234] wireguard0: entered allmulticast mode [ 411.325658][T32228] lo speed is unknown, defaulting to 1000 [ 411.472707][T32248] netlink: 'syz.1.11944': attribute type 27 has an invalid length. [ 411.537914][T32248] 0{X功: left allmulticast mode [ 411.635440][T32258] netlink: 'syz.8.11956': attribute type 27 has an invalid length. [ 411.822798][T32268] loop3: detected capacity change from 0 to 512 [ 411.895813][T32268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.927339][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.007171][T32248] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.014476][T32248] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.056668][T32280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11954'. [ 412.154875][T32248] wg2: left promiscuous mode [ 412.159638][T32248] wg2: left allmulticast mode [ 412.240632][T32248] veth3: left promiscuous mode [ 412.246151][T32248] gtp0: left promiscuous mode [ 412.264233][ T36] lo speed is unknown, defaulting to 1000 [ 412.270173][ T36] syz0: Port: 1 Link DOWN [ 412.290794][T32254] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.326219][T32254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.368788][T32258] wg2: left promiscuous mode [ 412.373452][T32258] wg2: left allmulticast mode [ 412.411033][T32261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.446386][ T4623] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.454958][ T4623] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.463423][ T4623] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 412.483090][ T36] lo speed is unknown, defaulting to 1000 [ 412.488929][ T36] syz0: Port: 1 Link ACTIVE [ 412.508279][ T4623] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.516863][ T4623] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.525301][ T4623] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 412.554726][ T4623] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.563383][ T4623] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.571967][ T4623] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 412.611144][ T4623] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.619733][ T4623] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.628373][ T4623] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 412.638572][T32313] loop3: detected capacity change from 0 to 128 [ 412.712154][T32313] bio_check_eod: 5618 callbacks suppressed [ 412.712170][T32313] syz.3.11962: attempt to access beyond end of device [ 412.712170][T32313] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 413.367980][T32353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11982'. [ 413.697361][T32364] netlink: 'syz.9.11988': attribute type 27 has an invalid length. [ 413.720792][T32364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.733847][T32364] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.747390][T32364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.820785][T32368] lo speed is unknown, defaulting to 1000 [ 413.827361][T32368] lo speed is unknown, defaulting to 1000 [ 414.241277][T32392] vlan0: entered allmulticast mode [ 414.246542][T32392] bridge_slave_0: entered allmulticast mode [ 414.484969][T32405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12002'. [ 414.541838][T32410] netlink: 'syz.1.12004': attribute type 27 has an invalid length. [ 414.792365][ T24] lo speed is unknown, defaulting to 1000 [ 414.809529][T32411] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.821194][T32411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.839753][T32296] lo speed is unknown, defaulting to 1000 [ 414.894742][T32418] sd 0:0:1:0: device reset [ 414.968051][T32429] wireguard0: entered promiscuous mode [ 414.973599][T32429] wireguard0: entered allmulticast mode [ 415.004628][T32432] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12012'. [ 415.044586][T32435] ip6gre1: entered allmulticast mode [ 415.111188][T32446] netlink: 'syz.6.12017': attribute type 27 has an invalid length. [ 415.129029][T32446] veth0_to_team: left promiscuous mode [ 415.134575][T32446] veth0_to_team: left allmulticast mode [ 415.171227][T32446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.236630][T32460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12027'. [ 415.272183][T32462] wireguard0: entered promiscuous mode [ 415.277811][T32462] wireguard0: entered allmulticast mode [ 415.299190][T32465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12030'. [ 415.318248][T32467] loop3: detected capacity change from 0 to 128 [ 415.327136][T32467] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.345354][T32470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12032'. [ 415.359110][T32470] sctp: [Deprecated]: syz.1.12032 (pid 32470) Use of int in max_burst socket option. [ 415.359110][T32470] Use struct sctp_assoc_value instead [ 415.406041][T12352] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.505217][T32485] netlink: 'syz.1.12037': attribute type 27 has an invalid length. [ 415.903195][T32479] Set syz1 is full, maxelem 65536 reached [ 415.928244][T32413] lo speed is unknown, defaulting to 1000 [ 415.934056][T32413] syz0: Port: 1 Link DOWN [ 416.037878][T32489] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.068163][T32489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.087850][T32297] lo speed is unknown, defaulting to 1000 [ 416.093631][T32297] syz0: Port: 1 Link ACTIVE [ 416.100106][T32495] netlink: 'syz.8.12038': attribute type 13 has an invalid length. [ 416.108214][T32495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12038'. [ 416.121278][T32495] netlink: 'syz.8.12038': attribute type 13 has an invalid length. [ 416.129245][T32495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12038'. [ 416.142492][T32497] bridge0: entered promiscuous mode [ 416.148346][T32497] bridge0: port 3(macsec2) entered blocking state [ 416.155056][T32497] bridge0: port 3(macsec2) entered disabled state [ 416.165442][T32497] macsec2: entered allmulticast mode [ 416.171147][T32497] bridge0: entered allmulticast mode [ 416.180069][T32497] macsec2: left allmulticast mode [ 416.185308][T32497] bridge0: left allmulticast mode [ 416.193138][T32497] bridge0: left promiscuous mode [ 416.199416][T32504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12053'. [ 416.220548][T32504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.315742][T32516] vlan0: entered allmulticast mode [ 416.427786][T32506] loop3: detected capacity change from 0 to 1024 [ 416.442440][T32506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.610130][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.644894][T32518] Set syz1 is full, maxelem 65536 reached [ 416.655696][T32530] wireguard1: entered promiscuous mode [ 416.661265][T32530] wireguard1: entered allmulticast mode [ 416.686370][T32535] netlink: 'syz.1.12055': attribute type 1 has an invalid length. [ 416.703400][T32535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 416.732462][T32535] bond8: (slave veth13): Enslaving as an active interface with a down link [ 416.753526][T32535] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 416.761741][T32535] bond8: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 416.924356][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 416.924373][ T30] audit: type=1326 audit(400.319:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.3.12063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 416.998221][ T30] audit: type=1326 audit(400.357:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.3.12063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 417.021661][ T30] audit: type=1326 audit(400.357:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.3.12063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 417.044926][ T30] audit: type=1326 audit(400.357:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.3.12063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 417.068075][ T30] audit: type=1326 audit(400.357:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.3.12063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 417.091696][ T30] audit: type=1326 audit(400.357:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.3.12063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 417.106604][T32557] sctp: [Deprecated]: syz.3.12066 (pid 32557) Use of int in max_burst socket option. [ 417.106604][T32557] Use struct sctp_assoc_value instead [ 417.114984][ T30] audit: type=1326 audit(400.357:13492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.3.12063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 417.140195][T32557] loop3: detected capacity change from 0 to 512 [ 417.152762][ T30] audit: type=1326 audit(400.357:13493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32548 comm="syz.3.12063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 417.163922][T32557] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.12066: corrupted xattr block 95: invalid header [ 417.196507][T32557] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.12066: bg 0: block 7: invalid block bitmap [ 417.209631][T32557] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 417.218731][T32557] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #11: comm syz.3.12066: corrupted xattr block 95: invalid header [ 417.233978][T32557] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 417.243174][T32557] EXT4-fs (loop3): 1 orphan inode deleted [ 417.249522][T32557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.264588][T32555] bridge: RTM_NEWNEIGH with invalid ether address [ 417.316159][ T30] audit: type=1326 audit(400.684:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32564 comm="syz.1.12070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 417.357132][ T30] audit: type=1326 audit(400.693:13495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32564 comm="syz.1.12070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 417.384670][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.512221][T32577] netlink: 'syz.6.12077': attribute type 3 has an invalid length. [ 417.565806][T32579] wireguard0: entered promiscuous mode [ 417.571350][T32579] wireguard0: entered allmulticast mode [ 418.073643][T32615] SELinux: failed to load policy [ 418.102063][T32619] __nla_validate_parse: 3 callbacks suppressed [ 418.102083][T32619] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12096'. [ 418.131996][T32621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12095'. [ 418.293958][T32650] wireguard0: entered promiscuous mode [ 418.299669][T32650] wireguard0: entered allmulticast mode [ 418.853410][T32695] loop3: detected capacity change from 0 to 128 [ 419.234333][T32724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12140'. [ 419.358949][T32730] wireguard0: entered promiscuous mode [ 419.364628][T32730] wireguard0: entered allmulticast mode [ 419.435937][T32744] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12149'. [ 419.446470][T32743] Set syz1 is full, maxelem 65536 reached [ 419.516113][T32756] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12154'. [ 419.618033][ T306] serio: Serial port ptm0 [ 419.990561][ T350] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12178'. [ 420.037345][ T358] netlink: 172 bytes leftover after parsing attributes in process `syz.8.12181'. [ 420.046968][ T360] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.12182'. [ 420.056751][ T360] netlink: zone id is out of range [ 420.062248][ T360] netlink: zone id is out of range [ 420.067457][ T360] netlink: del zone limit has 8 unknown bytes [ 420.117266][ T371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12187'. [ 420.126669][ T371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12187'. [ 420.328517][ T377] wireguard0: left promiscuous mode [ 420.333883][ T377] wireguard0: left allmulticast mode [ 420.351859][T11451] lo speed is unknown, defaulting to 1000 [ 420.357755][T11451] syz0: Port: 1 Link DOWN [ 420.462715][ T391] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 420.528887][ T395] tipc: New replicast peer: 100.1.1.1 [ 420.534597][ T395] tipc: Enabled bearer , priority 10 [ 420.839566][ T441] loop9: detected capacity change from 0 to 512 [ 420.881821][ T441] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.902266][ T441] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.12218: Failed to acquire dquot type 0 [ 420.983758][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.015459][ T464] netlink: 'syz.3.12227': attribute type 29 has an invalid length. [ 421.039707][ T464] netlink: 'syz.3.12227': attribute type 29 has an invalid length. [ 421.198808][ T487] netlink: 'syz.1.12237': attribute type 10 has an invalid length. [ 421.466446][ T530] 1{X功: renamed from 30{X功 [ 421.481257][ T530] 1{X功: entered allmulticast mode [ 421.503081][ T530] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 421.519576][ T531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=531 comm=syz.1.12254 [ 422.079747][ T476] syz.6.12232 (476) used greatest stack depth: 6328 bytes left [ 422.206648][ T585] loop3: detected capacity change from 0 to 512 [ 422.222413][ T585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 422.257209][ T585] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 422.279066][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 422.279082][ T30] audit: type=1400 audit(405.333:13700): avc: denied { name_bind } for pid=598 comm="syz.1.12282" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 422.315436][ T30] audit: type=1400 audit(405.333:13701): avc: denied { node_bind } for pid=598 comm="syz.1.12282" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 422.343212][ T30] audit: type=1400 audit(405.389:13702): avc: denied { create } for pid=593 comm="syz.9.12281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.378961][ T30] audit: type=1400 audit(405.417:13703): avc: denied { block_suspend } for pid=596 comm="syz.8.12283" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.386030][ T604] loop9: detected capacity change from 0 to 512 [ 422.407259][ T604] EXT4-fs: Ignoring removed nobh option [ 422.452891][ T604] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 422.465077][ T604] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.12285: invalid indirect mapped block 256 (level 1) [ 422.467180][ T617] 9pnet_fd: Insufficient options for proto=fd [ 422.485763][ T30] audit: type=1400 audit(405.511:13704): avc: denied { mounton } for pid=613 comm="syz.6.12288" path="/1866/file0" dev="tmpfs" ino=9648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 422.488448][ T604] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.12285: invalid indirect mapped block 2683928664 (level 1) [ 422.562004][ T604] EXT4-fs (loop9): 1 truncate cleaned up [ 422.574610][ T604] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.589354][ T624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=624 comm=syz.1.12292 [ 422.602042][ T624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=624 comm=syz.1.12292 [ 422.617203][ T30] audit: type=1400 audit(405.651:13705): avc: denied { mount } for pid=603 comm="syz.9.12285" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 422.639404][ T604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.654187][ T604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.667101][ T30] audit: type=1400 audit(405.670:13706): avc: denied { write } for pid=603 comm="syz.9.12285" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.689821][ T30] audit: type=1400 audit(405.670:13707): avc: denied { create } for pid=627 comm="syz.6.12295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 422.709284][ T30] audit: type=1400 audit(405.670:13708): avc: denied { connect } for pid=627 comm="syz.6.12295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 422.728798][ T30] audit: type=1400 audit(405.670:13709): avc: denied { write } for pid=627 comm="syz.6.12295" path="socket:[106888]" dev="sockfs" ino=106888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 423.358566][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.395691][ T706] netlink: 'syz.9.12327': attribute type 10 has an invalid length. [ 423.405575][ T706] team0: Device dummy0 failed to register rx_handler [ 423.422300][ T706] netlink: 'syz.9.12327': attribute type 10 has an invalid length. [ 423.612812][ T734] loop3: detected capacity change from 0 to 1024 [ 423.627024][ T734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.641350][ T734] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.12342: bg 0: block 280: padding at end of block bitmap is not set [ 423.659427][ T734] EXT4-fs (loop3): Remounting filesystem read-only [ 423.666950][ T736] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎@) failed with errno=-22 [ 423.688188][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.756737][ T749] rdma_op ffff88811330f980 conn xmit_rdma 0000000000000000 [ 424.206975][ T808] __nla_validate_parse: 8 callbacks suppressed [ 424.206998][ T808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12369'. [ 424.251938][ T808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12369'. [ 424.435057][ T827] netlink: 48 bytes leftover after parsing attributes in process `syz.9.12376'. [ 424.652980][ T845] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12385'. [ 424.711418][ T848] loop3: detected capacity change from 0 to 8192 [ 424.727998][ T854] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12388'. [ 424.895288][ T872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12397'. [ 424.934538][ T876] IPv4: Oversized IP packet from 127.202.26.0 [ 425.006432][ T878] infiniband syz!: set down [ 425.011052][ T878] infiniband syz!: added team_slave_0 [ 425.023257][ T878] RDS/IB: syz!: added [ 425.027370][ T878] smc: adding ib device syz! with port count 1 [ 425.033824][ T878] smc: ib device syz! port 1 has pnetid [ 425.285912][ T911] hub 9-0:1.0: USB hub found [ 425.292799][ T911] hub 9-0:1.0: 8 ports detected [ 425.403982][ T929] 9pnet: p9_errstr2errno: server reported unknown error 滰00000000000000000000007 [ 425.596377][ T942] loop3: detected capacity change from 0 to 512 [ 425.607826][ T942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 425.617804][ T942] System zones: 1-12 [ 425.624003][ T942] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.12427: error while reading EA inode 32 err=-116 [ 425.656402][ T942] EXT4-fs (loop3): Remounting filesystem read-only [ 425.663007][ T942] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 425.673290][ T942] EXT4-fs (loop3): 1 orphan inode deleted [ 425.679773][ T942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.727565][ T957] wireguard0: entered promiscuous mode [ 425.733204][ T957] wireguard0: entered allmulticast mode [ 426.055602][ T994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12450'. [ 426.138735][ T996] lo speed is unknown, defaulting to 1000 [ 426.145142][ T996] lo speed is unknown, defaulting to 1000 [ 426.209282][ T1003] wireguard0: entered promiscuous mode [ 426.214928][ T1003] wireguard0: entered allmulticast mode [ 426.491805][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.528474][ T1031] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12467'. [ 426.559308][ T1031] sch_tbf: burst 511 is lower than device veth11 mtu (1514) ! [ 426.571153][ T1033] wireguard0: entered promiscuous mode [ 426.576731][ T1033] wireguard0: entered allmulticast mode [ 426.731401][ T1047] loop9: detected capacity change from 0 to 1024 [ 426.741223][ T1047] EXT4-fs: Ignoring removed bh option [ 426.753642][ T1041] loop3: detected capacity change from 0 to 32768 [ 426.761943][ T1047] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.786472][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.809524][ T1041] loop3: p1 p2 p3 < p5 p6 > [ 426.814349][ T1041] loop3: p1 size 242222080 extends beyond EOD, truncated [ 426.822556][ T1041] loop3: p2 start 4294967295 is beyond EOD, truncated [ 427.032890][ T1070] openvswitch: netlink: Message has 6 unknown bytes. [ 427.065721][ T1072] wireguard1: entered promiscuous mode [ 427.071241][ T1072] wireguard1: entered allmulticast mode [ 427.106976][ T1077] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 427.462426][ T1111] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 427.501089][ T1117] wireguard1: entered promiscuous mode [ 427.506640][ T1117] wireguard1: entered allmulticast mode [ 427.790927][ T30] kauditd_printk_skb: 340 callbacks suppressed [ 427.790997][ T30] audit: type=1400 audit(410.487:14050): avc: denied { tracepoint } for pid=1131 comm="syz.6.12510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 427.838104][ T1130] loop3: detected capacity change from 0 to 8192 [ 427.878670][ T30] audit: type=1400 audit(410.571:14051): avc: denied { mount } for pid=1129 comm="syz.3.12509" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 427.912685][ T30] audit: type=1400 audit(410.599:14052): avc: denied { unmount } for pid=12352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 427.955703][ T1148] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 428.399768][ T30] audit: type=1326 audit(411.058:14053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 428.455071][ T30] audit: type=1326 audit(411.058:14054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 428.478505][ T30] audit: type=1326 audit(411.058:14055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 428.501542][ T30] audit: type=1326 audit(411.058:14056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 428.524552][ T30] audit: type=1326 audit(411.058:14057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 428.547620][ T30] audit: type=1326 audit(411.086:14058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 428.547865][ T1173] loop9: detected capacity change from 0 to 8192 [ 428.570736][ T30] audit: type=1326 audit(411.086:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1172 comm="syz.3.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eaafebe9 code=0x7ffc0000 [ 429.021256][ T1210] lo speed is unknown, defaulting to 1000 [ 429.038614][ T1210] lo speed is unknown, defaulting to 1000 [ 429.280286][ T1230] sctp: [Deprecated]: syz.9.12554 (pid 1230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.280286][ T1230] Use struct sctp_sack_info instead [ 429.574762][ T1263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12565'. [ 429.630609][ T1265] lo speed is unknown, defaulting to 1000 [ 429.649710][ T1265] lo speed is unknown, defaulting to 1000 [ 429.903499][ T1303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.936935][ T1303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.967756][ T1303] 9pnet: p9_errstr2errno: server reported unknown error 滰00000000000000000000010 [ 430.079711][ T1317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12585'. [ 430.396860][ T1352] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12599'. [ 431.076500][ T1385] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12614'. [ 431.106479][ T1387] netlink: 96 bytes leftover after parsing attributes in process `syz.8.12616'. [ 431.264709][ T1396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12615'. [ 431.276481][ T1396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12615'. [ 432.116254][ T1432] loop3: detected capacity change from 0 to 512 [ 432.144278][ T1432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.167035][ T1432] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12634: Failed to acquire dquot type 0 [ 432.307044][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.395314][ T1464] loop3: detected capacity change from 0 to 1024 [ 432.412668][ T1464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.431475][ T1464] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 432.454248][ T1474] loop9: detected capacity change from 0 to 1024 [ 432.463848][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.476307][ T1474] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.491185][ T1474] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.12650: bg 0: block 280: padding at end of block bitmap is not set [ 432.506279][ T1474] EXT4-fs (loop9): Remounting filesystem read-only [ 432.529798][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.584637][ T1490] loop9: detected capacity change from 0 to 1024 [ 432.591550][ T1490] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 432.606033][ T1490] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎@) failed with errno=-22 [ 432.635127][ T1492] loop9: detected capacity change from 0 to 128 [ 432.672251][ T1492] syz.9.12656: attempt to access beyond end of device [ 432.672251][ T1492] loop9: rw=0, sector=121, nr_sectors = 8 limit=128 [ 433.265035][ T1518] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12665'. [ 433.378226][ T1530] lo speed is unknown, defaulting to 1000 [ 433.385019][ T1530] lo speed is unknown, defaulting to 1000 [ 433.433237][ T1537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12682'. [ 433.457656][ T1537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12682'. [ 433.786867][ T1570] loop9: detected capacity change from 0 to 512 [ 433.789621][ T30] kauditd_printk_skb: 227 callbacks suppressed [ 433.789640][ T30] audit: type=1326 audit(416.081:14285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1576 comm="syz.1.12678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 433.822882][ T30] audit: type=1326 audit(416.081:14286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1576 comm="syz.1.12678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 433.832243][ T1580] loop9: detected capacity change from 0 to 1024 [ 433.846765][ T30] audit: type=1326 audit(416.081:14287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1576 comm="syz.1.12678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 433.876101][ T30] audit: type=1326 audit(416.090:14288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1576 comm="syz.1.12678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 433.889472][ T1580] EXT4-fs: Ignoring removed oldalloc option [ 433.899098][ T30] audit: type=1326 audit(416.090:14289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1576 comm="syz.1.12678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 433.905138][ T1580] EXT4-fs: Ignoring removed bh option [ 433.927943][ T30] audit: type=1326 audit(416.090:14290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1576 comm="syz.1.12678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 433.956367][ T30] audit: type=1326 audit(416.090:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1576 comm="syz.1.12678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8a78ebe9 code=0x7ffc0000 [ 434.001309][ T1584] 8021q: adding VLAN 0 to HW filter on device bond7 [ 434.003354][ T1587] netlink: 'syz.8.12684': attribute type 1 has an invalid length. [ 434.039474][ T1580] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.065457][ T1587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.089740][ T1594] 1{X功: left allmulticast mode [ 434.107424][ T30] audit: type=1400 audit(416.390:14292): avc: denied { read open } for pid=1579 comm="syz.9.12680" path="/485/file1/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 434.130229][ T30] audit: type=1400 audit(416.390:14293): avc: denied { write } for pid=1579 comm="syz.9.12680" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 434.167008][ T1587] bond3: (slave veth11): Enslaving as an active interface with a down link [ 434.183766][ T1580] ================================================================== [ 434.191913][ T1580] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 434.199083][ T1580] [ 434.201420][ T1580] write to 0xffff888119d2c28c of 4 bytes by task 1596 on cpu 1: [ 434.209145][ T1580] xas_set_mark+0x12b/0x140 [ 434.213670][ T1580] __folio_start_writeback+0x1dd/0x440 [ 434.219163][ T1580] ext4_bio_write_folio+0x5ad/0x9f0 [ 434.224395][ T1580] mpage_process_page_bufs+0x4a1/0x620 [ 434.229878][ T1580] mpage_prepare_extent_to_map+0x786/0xc00 [ 434.235704][ T1580] ext4_do_writepages+0xa05/0x2750 [ 434.240839][ T1580] ext4_writepages+0x176/0x300 [ 434.245711][ T1580] do_writepages+0x1c6/0x310 [ 434.250324][ T1580] file_write_and_wait_range+0x156/0x2c0 [ 434.256270][ T1580] generic_buffers_fsync_noflush+0x45/0x120 [ 434.262268][ T1580] ext4_sync_file+0x1ab/0x690 [ 434.266981][ T1580] vfs_fsync_range+0x10a/0x130 [ 434.271759][ T1580] ext4_buffered_write_iter+0x34f/0x3c0 [ 434.277334][ T1580] ext4_file_write_iter+0x383/0xf00 [ 434.282580][ T1580] iter_file_splice_write+0x669/0x9e0 [ 434.287965][ T1580] direct_splice_actor+0x156/0x2a0 [ 434.293089][ T1580] splice_direct_to_actor+0x312/0x680 [ 434.298476][ T1580] do_splice_direct+0xda/0x150 [ 434.303339][ T1580] do_sendfile+0x380/0x650 [ 434.307781][ T1580] __x64_sys_sendfile64+0x105/0x150 [ 434.313098][ T1580] x64_sys_call+0x2bb0/0x2ff0 [ 434.317801][ T1580] do_syscall_64+0xd2/0x200 [ 434.322332][ T1580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.328252][ T1580] [ 434.330584][ T1580] read to 0xffff888119d2c28c of 4 bytes by task 1580 on cpu 0: [ 434.338160][ T1580] xas_find_marked+0x5dc/0x620 [ 434.342947][ T1580] find_get_entry+0x5d/0x380 [ 434.347560][ T1580] filemap_get_folios_tag+0x92/0x210 [ 434.352867][ T1580] filemap_fdatawait_range+0x88/0x1d0 [ 434.358266][ T1580] __writeback_single_inode+0xdb/0x7c0 [ 434.363761][ T1580] writeback_single_inode+0x167/0x3e0 [ 434.369172][ T1580] sync_inode_metadata+0x5b/0x90 [ 434.374138][ T1580] generic_buffers_fsync_noflush+0xd9/0x120 [ 434.380053][ T1580] ext4_sync_file+0x1ab/0x690 [ 434.384771][ T1580] vfs_fsync_range+0x10a/0x130 [ 434.389634][ T1580] ext4_buffered_write_iter+0x34f/0x3c0 [ 434.395207][ T1580] ext4_file_write_iter+0x383/0xf00 [ 434.400428][ T1580] iter_file_splice_write+0x669/0x9e0 [ 434.405816][ T1580] direct_splice_actor+0x156/0x2a0 [ 434.411028][ T1580] splice_direct_to_actor+0x312/0x680 [ 434.416416][ T1580] do_splice_direct+0xda/0x150 [ 434.421191][ T1580] do_sendfile+0x380/0x650 [ 434.425639][ T1580] __x64_sys_sendfile64+0x105/0x150 [ 434.430876][ T1580] x64_sys_call+0x2bb0/0x2ff0 [ 434.435672][ T1580] do_syscall_64+0xd2/0x200 [ 434.440217][ T1580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.446126][ T1580] [ 434.448459][ T1580] value changed: 0x0a000021 -> 0x04000021 [ 434.454178][ T1580] [ 434.456505][ T1580] Reported by Kernel Concurrency Sanitizer on: [ 434.462707][ T1580] CPU: 0 UID: 0 PID: 1580 Comm: syz.9.12680 Tainted: G W 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 434.476790][ T1580] Tainted: [W]=WARN [ 434.480603][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.490758][ T1580] ================================================================== [ 434.502044][ T1595] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 434.503108][ T30] audit: type=1400 audit(416.464:14294): avc: denied { setopt } for pid=1597 comm="syz.3.12686" lport=50605 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 434.512976][ T1595] bond3: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 434.870203][T28246] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.320970][T32297] page_pool_release_retry() stalled pool shutdown: id 264, 3329 inflight 60 sec