last executing test programs: 2m27.801553938s ago: executing program 3 (id=1337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000004}) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 2m26.954508711s ago: executing program 32 (id=1360): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 2m26.940383111s ago: executing program 3 (id=1363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 2m26.822627733s ago: executing program 3 (id=1365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) 2m26.822131273s ago: executing program 3 (id=1366): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m26.808318033s ago: executing program 3 (id=1367): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 2m26.660382165s ago: executing program 3 (id=1368): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x701}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0xfffe, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) 2m26.616503966s ago: executing program 33 (id=1368): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x701}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0xfffe, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) 2m23.296609026s ago: executing program 1 (id=1432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 2m23.085205089s ago: executing program 1 (id=1437): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="11"], 0x14) 2m23.003238331s ago: executing program 1 (id=1442): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sync() write$binfmt_misc(r0, 0x0, 0xfffffecc) 2m22.885534852s ago: executing program 1 (id=1448): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2m22.668406286s ago: executing program 1 (id=1460): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fcntl$notify(r0, 0x402, 0x29) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000000dc0)=""/4106, 0x100a) 2m21.963725096s ago: executing program 1 (id=1480): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m21.924646117s ago: executing program 34 (id=1480): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m52.752184446s ago: executing program 4 (id=2385): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in6=@local, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3c}}, 0xf0}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 1m52.742818936s ago: executing program 4 (id=2387): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 1m51.864472959s ago: executing program 4 (id=2421): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1m51.619966193s ago: executing program 4 (id=2428): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1m51.506666915s ago: executing program 4 (id=2434): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) 1m51.262631328s ago: executing program 4 (id=2446): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m51.219316699s ago: executing program 35 (id=2446): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m28.154492106s ago: executing program 6 (id=3296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 1m28.101502347s ago: executing program 6 (id=3297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 1m28.076924337s ago: executing program 6 (id=3300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) open(0x0, 0x14507e, 0x0) 1m28.049181638s ago: executing program 6 (id=3302): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 1m28.022239878s ago: executing program 6 (id=3304): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m27.850885491s ago: executing program 6 (id=3313): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)}, 0x400c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m27.809943661s ago: executing program 36 (id=3313): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)}, 0x400c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m20.296416084s ago: executing program 2 (id=3551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m20.259727055s ago: executing program 2 (id=3553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000380)=0x1040, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.241433115s ago: executing program 2 (id=3555): setsockopt(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresgid(0xee00, 0xee01, 0x0) setreuid(0xee01, 0xee01) 1m20.220448345s ago: executing program 2 (id=3556): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) move_mount(r0, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f00000001c0)='./file0/file0\x00', 0x22) 1m20.181796696s ago: executing program 2 (id=3560): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 1m20.120467927s ago: executing program 2 (id=3562): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1m20.088719747s ago: executing program 37 (id=3562): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.374593449s ago: executing program 0 (id=6465): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.374273599s ago: executing program 0 (id=6466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 1.36053013s ago: executing program 0 (id=6467): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r0, r1, 0x0, 0x110003) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0xf36, 0x8, "f494bfeba3160200160000000000006d004000"}) 1.238559421s ago: executing program 9 (id=6470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40001, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r3, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) 1.103091954s ago: executing program 9 (id=6472): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 549.026792ms ago: executing program 8 (id=6487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2000c094) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 548.457542ms ago: executing program 7 (id=6488): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) 502.747732ms ago: executing program 8 (id=6489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x10000, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@nobarrier}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 502.444403ms ago: executing program 7 (id=6490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r2, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) 502.238532ms ago: executing program 0 (id=6491): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) connect$inet(r0, &(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 502.003352ms ago: executing program 8 (id=6492): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90100b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 493.131203ms ago: executing program 7 (id=6494): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 467.515413ms ago: executing program 8 (id=6495): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) stat(0x0, 0x0) 427.816454ms ago: executing program 0 (id=6497): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 427.476204ms ago: executing program 7 (id=6498): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000f00)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a080bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d", 0xc5}], 0x1}}], 0x1, 0xc0) prctl$PR_SET_NAME(0xf, &(0x7f0000001980)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8fv\x9f\x05\xd1\x984\xc8\x14\xaaa\xe9\x91\x8e\xf9\xc8\xa4e\x00u\xef\xc2\xa5\xe27\xb4\xcds\xf4*I\x8f\x00\x00\x00\x00\x00\x00\x10\xac5\x1a\v\n\xca\x18\xfc\xd3G\xbd\'\xad<\x19O\xa6#\x82\xff \x03\xccA\x9f\x0e@\r\x1cD\x80nbWR\\\xfb\xc0a\xc5\x95P\xe7\xf4fPA\xc8\x03\xaeN\x12u\x91\x18\x17\xab\xc9\xf2\x1d\x96D\xc8\x0ft\x88\xb6{\xf6p\xfaU\x9a\x8f\xb1\xaf\x90\xb2u\'\xdc\x81\f\xe1\\89d\xe9\x06\xb1\xd9\x90\xb4\x9f\x11\'\xac\x14r\xfa\x88\xc9p#~E\x1c\xab\x96\b\xad\f\xe6\xc9\xad\xc9\xa0\f\x83\xb94\x0e[\xcd\xd6\xc9O\xba\xac\xc5\'\xdb\xce\xb4\xa4\xa3\x9a\x1eXk\x92g\x81\x7f\xfdBr\x84\xaf:O\xcf}N\xe1\x91\xaf\xd1\xb7\xd6=\xaf\xc1gf\x9d\x0fl;y\x05\xc0\xd7\xef\x05\xd3\xa0U\x12\xf4\xe2>\xad\x1df\xcf\xaaL,#\x82:\xb6\x8d\x89\xd9i\xcd\x88\x9a\x83Ig\x15m\x15\x1d\xd7m\xa48\xb3\x06\xec\xbe\xa2\xb8\xb6\xc8\xbec\x968\xa3\x00;\x85\x90-\x12\x16\xfa\x86jf\x9c\x17h\fIaUK\xf8\xc3\xf2\xe9\xaa\xb4=H\x8bF\xdb\x18\xcfM\xf8\x93\xb2\xb2F\x017k\xbe\xadr\x8b\xf0T^m0\xe2\xec\x9f\xddi\x82}\xa1\x85\xc1\xb9\x8b\xd9\x12(\xd5\xb3\xa7\xe8\xfen\xf8\xf5\xe4z\x02uC\x8f\x18\xe4D\x90\xfa1\x0e\x1c\xa7\xe0)Z\x86;V\x03\x84\x9b\x97\xe1\x97\xc3\x8bSc\xb4\xc7\xafk\xda\xb6\a\x1d\v\x00\x00\x00\x00\x00\x00\x00\xffbz:\x04\xfa\xb0\xbc\x15b\x1b\x1f\xbc\x17c5 p\x0f\xbb2\xc7k\x1b\xe8\xe3G\xba\x8d\x9e\xf3s\xd7\x13-\x0ec++B\x96\x98\r\x03\x88\xd6b)m\x80h/?i\x82t\xad\x91\xe7\x8b\x10\xed\x02\xd7wmt\x18\x12g\xbcL@\x9f\x98=\xc4\x9d2\xb9\xb5\xd0\x0f\xfc9\xac!\xd7\xb3\xe3n\xfe\xc0S\xa3\xc1\xe3\xd4\xa4kN\xba\xd4F\x97C \x1ckK,T\x03\xb6\x19\x9a\xeb\x11=\x8b\xd6\x86\x10oR\x8d\xcf\xa3\x8a\x01\x92T\x05bE\n{\xf8\xbac\x10\x9a\xee{,\xb4?\x92#{\xe4Mv\xab\x1d\x957\f\xd1') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 427.066824ms ago: executing program 0 (id=6500): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "224427a0094dd132", "327cfef4c63eccd7547ac056f55d976c", '\x00', "ae2762aee2d84113"}, 0x28) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/98, 0x62}], 0x1}, 0x4}], 0x2, 0x40000042, 0x0) 370.560705ms ago: executing program 8 (id=6501): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x48}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000008c0)={0x0, 0xfffb, 0x20, 0x8, 0x8}, &(0x7f0000000900)=0x18) 370.385875ms ago: executing program 7 (id=6502): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x3f}, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x23, 0x1000000, 0x7e, 0x6b}, 0x3c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x3, r0, 0x5}) 348.845295ms ago: executing program 8 (id=6506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 294.484976ms ago: executing program 5 (id=6510): unshare(0x40020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000c, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) 288.906406ms ago: executing program 7 (id=6511): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) unshare(0x60600) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 198.692317ms ago: executing program 5 (id=6512): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 198.479907ms ago: executing program 5 (id=6513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/180}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='mm_lru_insertion\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 198.305457ms ago: executing program 9 (id=6514): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$l2tp(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, r4, 0x9c3fa077fa966179, 0x4, 0x25dfdbfb, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 194.955557ms ago: executing program 5 (id=6515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000010000000180012800b000100697036746e6c0000080002800400130008000300", @ANYRES32=r5], 0x40}}, 0x0) 131.977248ms ago: executing program 9 (id=6516): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 66.707369ms ago: executing program 5 (id=6517): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 66.436329ms ago: executing program 9 (id=6518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r1 = syz_io_uring_setup(0x466c, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x3, 0xfffffeff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r4, 0x0, 0x0, r4}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 46.92818ms ago: executing program 5 (id=6519): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 0s ago: executing program 9 (id=6520): inotify_init() bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) epoll_create1(0x0) epoll_create1(0x0) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) kernel console output (not intermixed with test programs): er size (4096), stripe is disabled [ 146.215967][T13488] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 146.226200][T13488] System zones: 0-1, 3-12 [ 146.235109][T13488] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.3746: lblock 1 mapped to illegal pblock 1 (length 1) [ 146.254264][T13488] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3746: Failed to acquire dquot type 0 [ 146.269109][T13488] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3746: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.284536][T13488] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3746: Invalid inode bitmap blk 0 in block_group 0 [ 146.299165][T13488] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 146.301613][ T1733] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 146.324084][T13488] EXT4-fs (loop7): 1 orphan inode deleted [ 146.331118][T13488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.361725][ T1733] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 146.388544][T13488] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.596819][T13520] openvswitch: netlink: Message has 6 unknown bytes. [ 146.639295][T13527] loop9: detected capacity change from 0 to 512 [ 146.692415][T13527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.705222][T13527] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.747757][T13527] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3767: corrupted inode contents [ 146.789944][T13527] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.3767: mark_inode_dirty error [ 146.863199][T13527] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3767: corrupted inode contents [ 146.885895][T13543] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.3767: corrupted inode contents [ 146.924217][T12417] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.948950][T13549] loop7: detected capacity change from 0 to 164 [ 146.975326][T13549] iso9660: Unknown parameter 'ÿÿÿÿ' [ 147.394139][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 147.394158][ T29] audit: type=1326 audit(1751750983.431:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.8.3787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff60384e929 code=0x0 [ 147.443112][ T29] audit: type=1326 audit(1751750983.474:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.7.3789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d3f5de929 code=0x0 [ 147.468311][T13601] loop8: detected capacity change from 0 to 1024 [ 147.501797][T13601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.534513][T13601] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.579844][T13601] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 147.594665][T13601] System zones: 0-1, 3-12 [ 147.610238][T13601] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #3: block 1: comm syz.8.3787: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.644509][T13601] Quota error (device loop8): write_blk: dquota write failed [ 147.652060][T13601] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 147.672823][T13601] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3787: Failed to acquire dquot type 0 [ 147.706828][T13601] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.3787: Freeing blocks not in datazone - block = 0, count = 4096 [ 147.741547][T13601] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3787: Invalid inode bitmap blk 0 in block_group 0 [ 147.759385][T13601] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 147.765088][ T4628] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.785443][T13601] EXT4-fs (loop8): 1 orphan inode deleted [ 147.793458][T13601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.806110][ T4628] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 147.814677][ T4628] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 0 [ 147.838665][T13601] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.934702][ T29] audit: type=1400 audit(1751750984.002:2818): avc: denied { associate } for pid=13652 comm="syz.5.3796" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 148.023361][T13667] loop5: detected capacity change from 0 to 512 [ 148.045939][T13667] EXT4-fs (loop5): too many log groups per flexible block group [ 148.053803][T13667] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 148.061104][T13667] EXT4-fs (loop5): mount failed [ 148.217285][ T29] audit: type=1326 audit(1751750984.297:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.8.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60384e929 code=0x7ffc0000 [ 148.274306][ T29] audit: type=1326 audit(1751750984.297:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.8.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff60384e929 code=0x7ffc0000 [ 148.297910][ T29] audit: type=1326 audit(1751750984.297:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.8.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60384e929 code=0x7ffc0000 [ 148.321633][ T29] audit: type=1326 audit(1751750984.297:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.8.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60384e929 code=0x7ffc0000 [ 148.349569][T13715] __nla_validate_parse: 9 callbacks suppressed [ 148.349588][T13715] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 148.367044][T13707] loop9: detected capacity change from 0 to 164 [ 148.374411][T13715] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 148.385094][T13707] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.439750][T13707] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.462990][T13728] loop7: detected capacity change from 0 to 512 [ 148.470300][T13728] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 148.488873][T13707] Symlink component flag not implemented [ 148.494566][T13707] Symlink component flag not implemented [ 148.507271][T13734] netlink: 'syz.5.3815': attribute type 4 has an invalid length. [ 148.515100][T13734] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3815'. [ 148.524463][T13728] EXT4-fs (loop7): 1 truncate cleaned up [ 148.531371][T13728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.547102][T13707] Symlink component flag not implemented (7) [ 148.553184][T13707] Symlink component flag not implemented (116) [ 148.572907][T13734] : renamed from bond0 [ 148.708202][ T7532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.990059][T13794] netlink: 'syz.7.3831': attribute type 2 has an invalid length. [ 149.074653][T13804] syzkaller0: entered promiscuous mode [ 149.080223][T13804] syzkaller0: entered allmulticast mode [ 149.099708][T13804] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 149.140624][T13811] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3837'. [ 149.165330][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3832'. [ 149.197470][T13815] loop5: detected capacity change from 0 to 1024 [ 149.221553][T13815] EXT4-fs: Ignoring removed nobh option [ 149.248534][T13815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.278863][ T7187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.404960][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3846'. [ 149.406569][T13828] vlan2: entered allmulticast mode [ 149.538964][T13845] loop7: detected capacity change from 0 to 1024 [ 149.546615][T13845] EXT4-fs: Ignoring removed orlov option [ 149.576558][T13845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.686730][ T7532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.727363][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3858'. [ 149.781859][T13882] pim6reg1: entered promiscuous mode [ 149.787385][T13882] pim6reg1: entered allmulticast mode [ 150.076410][T13931] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.129595][T13936] tipc: Started in network mode [ 150.134525][T13936] tipc: Node identity 4ac0984db4f2, cluster identity 4711 [ 150.141764][T13936] tipc: Enabled bearer , priority 0 [ 150.185931][T13936] tipc: Disabling bearer [ 150.459846][T13996] netlink: 'syz.0.3875': attribute type 1 has an invalid length. [ 150.484777][T13996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.509112][T13996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.552356][T13996] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 150.565509][T14005] program syz.9.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.614372][T13996] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 151.165643][T14058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.226931][T14058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.629864][T14094] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3906'. [ 152.226748][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 152.226765][ T29] audit: type=1326 audit(1751750988.529:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.5.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 152.257488][ T29] audit: type=1326 audit(1751750988.561:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.5.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 152.281043][ T29] audit: type=1326 audit(1751750988.561:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.5.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 152.309793][ T29] audit: type=1326 audit(1751750988.561:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.5.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 152.333419][ T29] audit: type=1326 audit(1751750988.572:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.5.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 152.357188][ T29] audit: type=1326 audit(1751750988.572:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14144 comm="syz.5.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 152.410881][ T29] audit: type=1400 audit(1751750988.719:3009): avc: denied { create } for pid=14154 comm="syz.0.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 152.437655][ T29] audit: type=1400 audit(1751750988.751:3010): avc: denied { connect } for pid=14154 comm="syz.0.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 152.457754][ T29] audit: type=1400 audit(1751750988.751:3011): avc: denied { write } for pid=14154 comm="syz.0.3931" path="socket:[38328]" dev="sockfs" ino=38328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 152.475752][T14148] ªªªªªª: renamed from vlan0 [ 152.537091][ T29] audit: type=1400 audit(1751750988.835:3012): avc: denied { read } for pid=14159 comm="syz.7.3933" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.607403][T14173] loop7: detected capacity change from 0 to 1024 [ 152.615287][T14173] EXT4-fs: Ignoring removed nobh option [ 152.622741][T14173] EXT4-fs: Ignoring removed bh option [ 152.655755][T14173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.737986][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3943'. [ 152.752684][ T7532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.833613][T14196] tipc: Enabled bearer , priority 0 [ 152.845781][T14198] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3948'. [ 152.868224][T14196] tipc: Disabling bearer [ 152.982913][T14215] netlink: 'syz.5.3957': attribute type 1 has an invalid length. [ 153.237562][T14248] loop7: detected capacity change from 0 to 512 [ 153.244661][T14248] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 153.288702][T14252] loop7: detected capacity change from 0 to 512 [ 153.295476][T14252] EXT4-fs: Ignoring removed i_version option [ 153.301529][T14252] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.308466][T14252] journal_path: Lookup failure for './file2' [ 153.314687][T14252] EXT4-fs: error: could not find journal device path [ 153.431584][T14270] __nla_validate_parse: 1 callbacks suppressed [ 153.431602][T14270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3983'. [ 153.817466][T14297] geneve2: entered promiscuous mode [ 153.831799][T14299] tipc: Started in network mode [ 153.836797][T14299] tipc: Node identity 3e4756cc05e3, cluster identity 4711 [ 153.843996][T14299] tipc: Enabled bearer , priority 0 [ 153.854101][T14299] tipc: Disabling bearer [ 154.191246][T14315] hub 9-0:1.0: USB hub found [ 154.198799][T14315] hub 9-0:1.0: 8 ports detected [ 154.466476][T14340] loop5: detected capacity change from 0 to 128 [ 154.506841][T14340] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.574286][T14340] ext4 filesystem being mounted at /555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 154.711733][ T7187] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.090141][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4018'. [ 155.138499][T14407] loop5: detected capacity change from 0 to 1024 [ 155.145484][T14407] EXT4-fs: Ignoring removed oldalloc option [ 155.153700][T14407] EXT4-fs: Ignoring removed bh option [ 155.174350][T14407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.233918][ T7187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.285439][T14426] : (slave bridge0): Releasing backup interface [ 155.315773][T14433] loop9: detected capacity change from 0 to 7 [ 155.323399][T14426] bridge_slave_0: left allmulticast mode [ 155.325031][T14433] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.329084][T14426] bridge_slave_0: left promiscuous mode [ 155.339537][T14433] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.342701][T14426] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.350405][T14433] loop9: unable to read partition table [ 155.363684][T14433] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 155.363684][T14433] ) failed (rc=-5) [ 155.377262][T14426] bridge_slave_1: left allmulticast mode [ 155.383182][T14426] bridge_slave_1: left promiscuous mode [ 155.388929][T14426] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.425221][T14426] : (slave bond_slave_0): Releasing backup interface [ 155.452604][T14426] : (slave bond_slave_1): Releasing backup interface [ 155.471204][T14426] team0: Port device team_slave_0 removed [ 155.499714][T14426] team0: Port device team_slave_1 removed [ 155.510568][T14426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.530408][T14426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.550124][T14426] bond1: (slave bridge2): Releasing active interface [ 155.768747][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4028'. [ 155.809950][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4028'. [ 156.046754][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4031'. [ 156.584399][T14532] loop8: detected capacity change from 0 to 1024 [ 156.591993][T14532] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 156.622032][T14532] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.642545][T14532] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 156.653916][T14539] sctp: [Deprecated]: syz.9.4046 (pid 14539) Use of int in max_burst socket option deprecated. [ 156.653916][T14539] Use struct sctp_assoc_value instead [ 156.689228][T14532] EXT4-fs (loop8): orphan cleanup on readonly fs [ 156.726061][T14532] EXT4-fs error (device loop8): ext4_read_inode_bitmap:167: comm +}[@: Inode bitmap for bg 0 marked uninitialized [ 156.795384][T14532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.819459][T14532] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.010079][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 157.010097][ T29] audit: type=1326 audit(1751750993.572:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.093625][ T29] audit: type=1326 audit(1751750993.615:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.117230][ T29] audit: type=1326 audit(1751750993.615:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.140789][ T29] audit: type=1400 audit(1751750993.625:3086): avc: denied { write } for pid=14562 comm="syz.7.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.160300][ T29] audit: type=1326 audit(1751750993.625:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.183970][ T29] audit: type=1326 audit(1751750993.625:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.207483][ T29] audit: type=1326 audit(1751750993.625:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.230999][ T29] audit: type=1326 audit(1751750993.625:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.254539][ T29] audit: type=1326 audit(1751750993.625:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.278229][ T29] audit: type=1326 audit(1751750993.625:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.5.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abe82e929 code=0x7ffc0000 [ 157.546224][T14611] tipc: Started in network mode [ 157.551378][T14611] tipc: Node identity 4, cluster identity 4711 [ 157.557654][T14611] tipc: Node number set to 4 [ 157.594391][T14613] loop9: detected capacity change from 0 to 2048 [ 157.634288][T14613] loop9: p1 < > p4 [ 157.639802][T14613] loop9: p4 size 8388608 extends beyond EOD, truncated [ 157.762524][T14618] loop7: detected capacity change from 0 to 128 [ 157.934411][T14618] syz.7.4078: attempt to access beyond end of device [ 157.934411][T14618] loop7: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 157.949577][T14618] syz.7.4078: attempt to access beyond end of device [ 157.949577][T14618] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 157.963253][T14618] syz.7.4078: attempt to access beyond end of device [ 157.963253][T14618] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 157.980754][T14618] syz.7.4078: attempt to access beyond end of device [ 157.980754][T14618] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 157.996441][T14618] syz.7.4078: attempt to access beyond end of device [ 157.996441][T14618] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 158.010984][T14618] syz.7.4078: attempt to access beyond end of device [ 158.010984][T14618] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 158.026604][T14618] syz.7.4078: attempt to access beyond end of device [ 158.026604][T14618] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 158.040396][T14618] syz.7.4078: attempt to access beyond end of device [ 158.040396][T14618] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 158.057176][T14618] syz.7.4078: attempt to access beyond end of device [ 158.057176][T14618] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 158.070835][T14618] syz.7.4078: attempt to access beyond end of device [ 158.070835][T14618] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 158.141806][T14642] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4089'. [ 158.151069][T14642] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 158.249958][T14661] syzkaller1: entered promiscuous mode [ 158.255751][T14661] syzkaller1: entered allmulticast mode [ 158.288305][T14663] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4098'. [ 158.317565][T14665] loop9: detected capacity change from 0 to 7 [ 158.324297][T14665] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.332391][T14665] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.340355][T14665] loop9: unable to read partition table [ 158.346291][T14665] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 158.346291][T14665] ) failed (rc=-5) [ 158.394977][T14673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4103'. [ 158.431123][T14676] loop5: detected capacity change from 0 to 128 [ 158.455208][T14676] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 158.465941][T14676] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 158.467959][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4106'. [ 158.475199][T14676] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 158.493904][T14676] Buffer I/O error on dev loop5, logical block 145, lost async page write [ 158.502821][T14676] Buffer I/O error on dev loop5, logical block 146, lost async page write [ 158.513511][T14676] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 158.527937][T14682] loop9: detected capacity change from 0 to 512 [ 158.549681][T14682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.564327][T14682] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.602515][T14682] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #18: comm +}[@: corrupted inode contents [ 158.626692][T14682] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #18: comm +}[@: mark_inode_dirty error [ 158.637931][T14682] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #18: comm +}[@: corrupted inode contents [ 158.654004][T14682] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #18: comm +}[@: mark_inode_dirty error [ 158.665875][T14682] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #18: comm +}[@: mark inode dirty (error -117) [ 158.679218][T14682] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 158.735244][T12417] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.877778][T14713] bond0: entered promiscuous mode [ 158.882961][T14713] bond0: entered allmulticast mode [ 158.889434][T14713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.898984][T14713] bond0 (unregistering): Released all slaves [ 159.035727][T14733] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4128'. [ 159.088012][T14738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4130'. [ 159.100308][T14738] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 159.287708][T14751] pim6reg1: entered promiscuous mode [ 159.293108][T14751] pim6reg1: entered allmulticast mode [ 159.454518][T14761] loop7: detected capacity change from 0 to 512 [ 159.505368][T14761] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 159.528125][T14761] EXT4-fs (loop7): orphan cleanup on readonly fs [ 159.551953][T14761] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 159.585181][T14761] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #16: comm +}[@: mark_inode_dirty error [ 159.625252][T14761] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 159.637010][T14761] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error [ 159.648450][T14761] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 159.675945][T14761] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 159.685709][T14761] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 159.698713][T14761] EXT4-fs error (device loop7): ext4_truncate:4597: inode #16: comm +}[@: mark_inode_dirty error [ 159.711760][T14761] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 159.722326][T14761] EXT4-fs (loop7): 1 truncate cleaned up [ 159.728342][ T4627] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 159.742231][T14761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.774267][ T7532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.832984][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4142'. [ 159.849185][T14772] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 159.893345][T14775] loop9: detected capacity change from 0 to 1024 [ 159.902937][T14771] SELinux: ebitmap: truncated map [ 159.908896][T14771] SELinux: failed to load policy [ 159.916600][T14775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.950111][T12417] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.970332][T14784] pim6reg1: entered promiscuous mode [ 159.975983][T14784] pim6reg1: entered allmulticast mode [ 159.990713][T14782] loop5: detected capacity change from 0 to 512 [ 160.002454][T14782] journal_path: Lookup failure for './file0/../file0' [ 160.009415][T14782] EXT4-fs: error: could not find journal device path [ 160.117046][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 160.170275][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 160.188039][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 160.201323][T14807] loop5: detected capacity change from 0 to 1024 [ 160.213373][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 160.226526][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 160.226809][T14807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.233266][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 160.251569][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 160.258120][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 160.264714][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 160.266713][T14809] tipc: Enabling of bearer rejected, failed to enable media [ 160.271301][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 160.374498][ T7187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.601333][T14847] bond2: entered promiscuous mode [ 160.606476][T14847] bond2: entered allmulticast mode [ 160.611868][T14847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.625088][T14847] bond2 (unregistering): Released all slaves [ 160.669967][T14852] loop5: detected capacity change from 0 to 512 [ 160.686347][T14852] EXT4-fs (loop5): orphan cleanup on readonly fs [ 160.695423][T14852] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.4180: bad orphan inode 13 [ 160.731358][T14852] ext4_test_bit(bit=12, block=18) = 1 [ 160.736981][T14852] is_bad_inode(inode)=0 [ 160.741190][T14852] NEXT_ORPHAN(inode)=2130706432 [ 160.746138][T14852] max_ino=32 [ 160.749363][T14852] i_nlink=1 [ 160.766417][T14852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.813312][T14852] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 160.818651][T14868] vlan2: entered allmulticast mode [ 160.880741][T14852] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 160.924842][ T7187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.016980][T14889] bond2: entered promiscuous mode [ 161.022235][T14889] bond2: entered allmulticast mode [ 161.027945][T14889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.028628][T14896] sd 0:0:1:0: device reset [ 161.039412][T14898] loop9: detected capacity change from 0 to 512 [ 161.046845][T14898] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 161.047104][T14889] bond2 (unregistering): Released all slaves [ 161.063130][T14898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 161.079266][T14898] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.4201: corrupted in-inode xattr: e_value size too large [ 161.093972][T14898] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.4201: couldn't read orphan inode 15 (err -117) [ 161.107004][T14898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.142367][T14903] loop5: detected capacity change from 0 to 256 [ 161.170674][T14903] FAT-fs (loop5): bogus number of FAT sectors [ 161.176868][T14903] FAT-fs (loop5): Can't find a valid FAT filesystem [ 161.196899][T12417] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.321696][T14931] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.4211'. [ 161.330935][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4211'. [ 162.070115][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 162.070133][ T29] audit: type=1400 audit(1751750998.909:3276): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.290691][ T29] audit: type=1400 audit(1751750999.151:3277): avc: denied { read write } for pid=7187 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.368005][ T29] audit: type=1400 audit(1751750999.225:3278): avc: denied { read write } for pid=12417 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.403597][ T29] audit: type=1400 audit(1751750999.257:3279): avc: denied { create } for pid=14968 comm="syz.9.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 162.423387][ T29] audit: type=1400 audit(1751750999.257:3280): avc: denied { create } for pid=14968 comm="syz.9.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 162.443136][ T29] audit: type=1400 audit(1751750999.257:3281): avc: denied { create } for pid=14970 comm="syz.7.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 162.463816][ T29] audit: type=1400 audit(1751750999.257:3282): avc: denied { read } for pid=14970 comm="syz.7.4232" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 162.503363][ T29] audit: type=1400 audit(1751750999.257:3283): avc: denied { read write } for pid=12417 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.527760][ T29] audit: type=1400 audit(1751750999.257:3284): avc: denied { map_create } for pid=14971 comm="syz.0.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 162.547141][ T29] audit: type=1400 audit(1751750999.257:3285): avc: denied { map_create } for pid=14971 comm="syz.0.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 162.870729][T15030] netlink: 'syz.8.4259': attribute type 39 has an invalid length. [ 162.898503][T15034] netlink: 'syz.5.4260': attribute type 29 has an invalid length. [ 162.907209][T15034] netlink: 'syz.5.4260': attribute type 29 has an invalid length. [ 163.192768][T15078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4282'. [ 163.428694][T15102] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 163.502679][T15112] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4299'. [ 163.563510][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4303'. [ 163.572574][T15120] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4303'. [ 163.577210][T15122] netlink: 'syz.7.4304': attribute type 17 has an invalid length. [ 163.581561][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4303'. [ 163.589465][T15122] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4304'. [ 163.598506][T15120] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4303'. [ 163.616830][T15120] netlink: 'syz.8.4303': attribute type 6 has an invalid length. [ 163.697080][T15132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15132 comm=syz.8.4309 [ 163.769341][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4314'. [ 163.778920][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4314'. [ 164.090515][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4325'. [ 164.260761][T15195] serio: Serial port ptm1 [ 164.313850][T15200] syzkaller0: entered promiscuous mode [ 164.319377][T15200] syzkaller0: entered allmulticast mode [ 164.442409][T15218] netlink: 'syz.7.4348': attribute type 1 has an invalid length. [ 164.450314][T15218] netlink: 'syz.7.4348': attribute type 4 has an invalid length. [ 164.550974][T15238] netlink: 'syz.5.4358': attribute type 6 has an invalid length. [ 165.007947][T15308] ALSA: seq fatal error: cannot create timer (-19) [ 165.265143][T15328] netlink: 'syz.7.4401': attribute type 4 has an invalid length. [ 165.274846][T15328] netlink: 'syz.7.4401': attribute type 4 has an invalid length. [ 165.675612][T15360] serio: Serial port ptm0 [ 166.818498][ T29] kauditd_printk_skb: 767 callbacks suppressed [ 166.818516][ T29] audit: type=1400 audit(1751751003.916:4053): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.874184][ T29] audit: type=1400 audit(1751751003.980:4054): avc: denied { map_create } for pid=15427 comm="syz.7.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.922879][ T29] audit: type=1400 audit(1751751003.980:4055): avc: denied { prog_load } for pid=15427 comm="syz.7.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.942197][ T29] audit: type=1400 audit(1751751003.980:4056): avc: denied { prog_load } for pid=15427 comm="syz.7.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.961531][ T29] audit: type=1400 audit(1751751003.980:4057): avc: denied { prog_load } for pid=15427 comm="syz.7.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.980786][ T29] audit: type=1326 audit(1751751003.980:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.7.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3f5de929 code=0x7ffc0000 [ 167.004440][ T29] audit: type=1326 audit(1751751003.980:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.7.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3f5de929 code=0x7ffc0000 [ 167.028007][ T29] audit: type=1326 audit(1751751003.980:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.7.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9d3f5de929 code=0x7ffc0000 [ 167.051729][ T29] audit: type=1326 audit(1751751003.980:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.7.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3f5de929 code=0x7ffc0000 [ 167.075272][ T29] audit: type=1326 audit(1751751003.980:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.7.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f9d3f5de929 code=0x7ffc0000 [ 168.070325][T15500] validate_nla: 1 callbacks suppressed [ 168.070346][T15500] netlink: 'syz.8.4474': attribute type 1 has an invalid length. [ 168.097853][T15500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.154255][T15500] bond1: (slave dummy0): making interface the new active one [ 168.180207][T15500] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 168.195054][T15510] netlink: 'syz.9.4477': attribute type 16 has an invalid length. [ 168.203041][T15510] netlink: 'syz.9.4477': attribute type 17 has an invalid length. [ 168.256079][T15510] net_ratelimit: 24 callbacks suppressed [ 168.256093][T15510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.257143][T15588] __nla_validate_parse: 13 callbacks suppressed [ 169.257203][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4514'. [ 169.294865][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4514'. [ 170.399111][T15633] netlink: 'syz.9.4533': attribute type 5 has an invalid length. [ 170.785044][T15656] netlink: 'syz.8.4544': attribute type 1 has an invalid length. [ 170.792872][T15656] netlink: 'syz.8.4544': attribute type 4 has an invalid length. [ 170.800647][T15656] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4544'. [ 170.810620][T15656] netlink: 'syz.8.4544': attribute type 1 has an invalid length. [ 170.818468][T15656] netlink: 'syz.8.4544': attribute type 4 has an invalid length. [ 170.826330][T15656] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4544'. [ 170.863047][T15662] netlink: 'syz.7.4546': attribute type 7 has an invalid length. [ 170.870968][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4546'. [ 170.891400][T15662] netlink: 'syz.7.4546': attribute type 7 has an invalid length. [ 170.899284][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4546'. [ 170.977598][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4554'. [ 170.992206][T15678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.008999][T15678] vlan2: entered allmulticast mode [ 171.014260][T15678] bond2: entered allmulticast mode [ 171.085599][T15684] ipvlan0: entered allmulticast mode [ 171.091132][T15684] veth0_vlan: entered allmulticast mode [ 171.097213][T15684] team0: Device ipvlan0 failed to register rx_handler [ 171.144208][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4558'. [ 171.172888][T15692] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 171.257426][T15704] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4565'. [ 171.308850][T15706] team0: Port device dummy0 added [ 171.318571][T15706] team0: Port device dummy0 removed [ 171.325610][T15706] : (slave dummy0): no link monitoring support [ 171.333012][T15706] : (slave dummy0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 171.354055][T15706] : (slave dummy0): Enslaving as an active interface with an up link [ 171.401611][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4571'. [ 171.568712][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 171.568730][ T29] audit: type=1400 audit(1751751008.922:4616): avc: denied { read write } for pid=12417 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.618719][ T29] audit: type=1400 audit(1751751008.922:4617): avc: denied { read write } for pid=10103 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.643169][ T29] audit: type=1400 audit(1751751008.965:4618): avc: denied { create } for pid=15739 comm="syz.8.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 171.662828][ T29] audit: type=1400 audit(1751751008.965:4619): avc: denied { map_create } for pid=15739 comm="syz.8.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.682388][ T29] audit: type=1400 audit(1751751008.965:4620): avc: denied { prog_load } for pid=15739 comm="syz.8.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.701656][ T29] audit: type=1400 audit(1751751008.965:4621): avc: denied { map_create } for pid=15741 comm="syz.9.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.720925][ T29] audit: type=1400 audit(1751751008.965:4622): avc: denied { prog_load } for pid=15741 comm="syz.9.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.740092][ T29] audit: type=1400 audit(1751751008.965:4623): avc: denied { read write } for pid=7187 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.764343][ T29] audit: type=1400 audit(1751751008.975:4624): avc: denied { create } for pid=15741 comm="syz.9.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 171.784337][ T29] audit: type=1400 audit(1751751008.975:4625): avc: denied { read write } for pid=10103 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.842206][T15758] team0 (unregistering): Port device team_slave_0 removed [ 171.851767][T15758] team0 (unregistering): Port device team_slave_1 removed [ 171.908587][T15764] all: renamed from lo (while UP) [ 172.363780][T15808] geneve3: entered promiscuous mode [ 172.363801][T15808] geneve3: entered allmulticast mode [ 172.518630][T15826] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 172.617384][T15835] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 172.710084][T15843] pim6reg1: entered promiscuous mode [ 172.710106][T15843] pim6reg1: entered allmulticast mode [ 172.779572][T15851] netem: change failed [ 172.831671][T15853] syzkaller0: entered promiscuous mode [ 172.837381][T15853] syzkaller0: entered allmulticast mode [ 172.933682][T15871] macsec1: entered promiscuous mode [ 172.939009][T15871] bridge0: entered promiscuous mode [ 172.945008][T15871] bridge0: port 3(macsec1) entered blocking state [ 172.951577][T15871] bridge0: port 3(macsec1) entered disabled state [ 172.958441][T15871] macsec1: entered allmulticast mode [ 172.963837][T15871] bridge0: entered allmulticast mode [ 172.969984][T15871] macsec1: left allmulticast mode [ 172.975120][T15871] bridge0: left allmulticast mode [ 172.981406][T15871] bridge0: left promiscuous mode [ 173.105745][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.113924][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.294758][T15911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.303014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.550053][T15933] validate_nla: 3 callbacks suppressed [ 173.550149][T15933] netlink: 'syz.0.4672': attribute type 1 has an invalid length. [ 173.572959][T15933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.597335][T15933] bond2: (slave veth13): Enslaving as an active interface with a down link [ 173.617921][T15933] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.625241][T15933] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 173.827748][T15962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.836258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.969089][T15969] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 173.975662][T15969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.983276][T15969] vhci_hcd vhci_hcd.0: Device attached [ 173.990680][T15969] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 173.997219][T15969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.004893][T15969] vhci_hcd vhci_hcd.0: Device attached [ 174.011294][T15969] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 174.017842][T15969] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 174.025634][T15969] vhci_hcd vhci_hcd.0: Device attached [ 174.031811][T15969] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 174.040868][T15969] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 174.047594][T15969] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.055347][T15969] vhci_hcd vhci_hcd.0: Device attached [ 174.061756][T15969] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(13) [ 174.068410][T15969] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.075879][T15969] vhci_hcd vhci_hcd.0: Device attached [ 174.082217][T15969] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(15) [ 174.089142][T15969] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.096830][T15969] vhci_hcd vhci_hcd.0: Device attached [ 174.102455][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.103339][T15969] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(17) [ 174.117252][T15969] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.124952][T15969] vhci_hcd vhci_hcd.0: Device attached [ 174.132077][T15980] vhci_hcd: connection closed [ 174.132252][T15978] vhci_hcd: connection closed [ 174.132577][T15982] vhci_hcd: connection closed [ 174.137137][T15976] vhci_hcd: connection closed [ 174.145011][ T4653] vhci_hcd: stop threads [ 174.146624][T15974] vhci_hcd: connection closed [ 174.151171][ T4653] vhci_hcd: release socket [ 174.155959][T15970] vhci_hcd: connection closed [ 174.160158][ T4653] vhci_hcd: disconnect device [ 174.160277][T15972] vhci_hcd: connection closed [ 174.165074][ T4653] vhci_hcd: stop threads [ 174.183096][ T4653] vhci_hcd: release socket [ 174.187525][ T4653] vhci_hcd: disconnect device [ 174.192547][ T4653] vhci_hcd: stop threads [ 174.196803][ T4653] vhci_hcd: release socket [ 174.201287][ T4653] vhci_hcd: disconnect device [ 174.206396][ T4653] vhci_hcd: stop threads [ 174.210704][ T4653] vhci_hcd: release socket [ 174.215125][ T4653] vhci_hcd: disconnect device [ 174.220076][ T4653] vhci_hcd: stop threads [ 174.224343][ T4653] vhci_hcd: release socket [ 174.228800][ T4653] vhci_hcd: disconnect device [ 174.233651][ T4653] vhci_hcd: stop threads [ 174.237972][ T4653] vhci_hcd: release socket [ 174.242410][ T4653] vhci_hcd: disconnect device [ 174.247320][ T4653] vhci_hcd: stop threads [ 174.251580][ T4653] vhci_hcd: release socket [ 174.253995][ T9] usb 15-1: new low-speed USB device number 3 using vhci_hcd [ 174.256036][ T4653] vhci_hcd: disconnect device [ 174.265089][ T9] usb 15-1: enqueue for inactive port 0 [ 174.274196][ T9] usb 15-1: enqueue for inactive port 0 [ 174.279776][ T9] usb 15-1: enqueue for inactive port 0 [ 174.349110][ T9] vhci_hcd: vhci_device speed not set [ 174.652384][T16037] bridge_slave_0: left promiscuous mode [ 174.658210][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.671032][T16037] bridge_slave_1: left allmulticast mode [ 174.676819][T16037] bridge_slave_1: left promiscuous mode [ 174.682569][T16037] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.709856][T16046] __nla_validate_parse: 8 callbacks suppressed [ 174.709875][T16046] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4720'. [ 174.710291][T16037] bond0: (slave bond_slave_0): Releasing backup interface [ 174.717698][T16047] netlink: 'syz.7.4715': attribute type 10 has an invalid length. [ 174.743949][T16037] bond0: (slave bond_slave_1): Releasing backup interface [ 174.752574][T16037] team0: Port device team_slave_0 removed [ 174.764751][T16037] team0: Port device team_slave_1 removed [ 174.772310][T16037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.782380][T16037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.790802][T16037] bond1: (slave bridge1): Releasing active interface [ 174.820561][T16047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.835041][T16047] team0: Port device bond0 added [ 174.847220][T16055] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 175.085347][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.223629][T16109] SET target dimension over the limit! [ 175.281767][T16112] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 176.001427][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.067151][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.131035][T16172] netlink: 'syz.0.4775': attribute type 1 has an invalid length. [ 176.208992][T16183] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4779'. [ 176.365051][ T29] kauditd_printk_skb: 833 callbacks suppressed [ 176.365070][ T29] audit: type=1400 audit(1751751013.980:5459): avc: denied { map_create } for pid=16195 comm="syz.7.4786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.409098][ T29] audit: type=1400 audit(1751751013.980:5460): avc: denied { prog_load } for pid=16195 comm="syz.7.4786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.428336][ T29] audit: type=1400 audit(1751751013.980:5461): avc: denied { prog_load } for pid=16195 comm="syz.7.4786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.483606][ T29] audit: type=1400 audit(1751751014.022:5462): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.507928][ T29] audit: type=1400 audit(1751751014.085:5463): avc: denied { map_create } for pid=16199 comm="syz.7.4787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.527337][ T29] audit: type=1400 audit(1751751014.085:5464): avc: denied { prog_load } for pid=16199 comm="syz.7.4787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.546662][ T29] audit: type=1400 audit(1751751014.085:5465): avc: denied { allowed } for pid=16199 comm="syz.7.4787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 176.566125][ T29] audit: type=1400 audit(1751751014.085:5466): avc: denied { create } for pid=16199 comm="syz.7.4787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 176.585898][ T29] audit: type=1400 audit(1751751014.096:5467): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.634778][ T29] audit: type=1400 audit(1751751014.254:5468): avc: denied { map_create } for pid=16206 comm="syz.0.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.748015][T16222] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 176.824850][T16233] xt_hashlimit: max too large, truncated to 1048576 [ 176.987605][T16257] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4814'. [ 177.036792][T16263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16263 comm=syz.5.4816 [ 177.450649][T16319] netlink: 'syz.9.4842': attribute type 4 has an invalid length. [ 177.486504][T16319] netlink: 'syz.9.4842': attribute type 4 has an invalid length. [ 178.041722][ T9] net_ratelimit: 2 callbacks suppressed [ 178.041741][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.452302][T16365] ip6gre1: entered allmulticast mode [ 178.581195][T16385] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4866'. [ 178.594746][T16382] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4866'. [ 178.688767][T16398] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 178.706362][T16400] netlink: 'syz.5.4874': attribute type 10 has an invalid length. [ 178.714446][T16400] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4874'. [ 178.738854][T16400] dummy0: entered promiscuous mode [ 178.746324][T16400] : (slave dummy0): Releasing backup interface [ 178.765884][T16400] bridge0: port 1(dummy0) entered blocking state [ 178.772396][T16400] bridge0: port 1(dummy0) entered disabled state [ 178.780657][T16400] dummy0: entered allmulticast mode [ 178.789380][T16410] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4879'. [ 178.831617][T16420] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.4880'. [ 178.841001][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4880'. [ 178.869904][T16426] -1: renamed from syzkaller0 [ 179.029725][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.579836][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4922'. [ 179.587338][T16505] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 179.610871][T16503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.624991][T16503] vlan0: entered allmulticast mode [ 179.630298][T16503] bond0: entered allmulticast mode [ 179.685327][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4928'. [ 179.694497][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4928'. [ 179.703530][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4928'. [ 179.712617][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4928'. [ 179.721651][T16517] netlink: 'syz.9.4928': attribute type 6 has an invalid length. [ 179.774242][T16528] netlink: 'syz.9.4934': attribute type 1 has an invalid length. [ 179.793127][T16528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.827519][T16528] bond1: (slave veth11): Enslaving as an active interface with a down link [ 179.856125][T16528] bond1: (slave dummy0): making interface the new active one [ 179.866469][T16528] dummy0: entered promiscuous mode [ 179.871806][T16528] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 179.922018][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4938'. [ 179.940557][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.007292][T16549] netlink: 'syz.9.4942': attribute type 1 has an invalid length. [ 180.016394][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.021891][T16549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.047476][T16552] netlink: 'syz.8.4943': attribute type 1 has an invalid length. [ 180.055372][T16552] netlink: 'syz.8.4943': attribute type 4 has an invalid length. [ 180.063285][T16552] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4943'. [ 180.077766][T16552] netlink: 'syz.8.4943': attribute type 1 has an invalid length. [ 180.085618][T16552] netlink: 'syz.8.4943': attribute type 4 has an invalid length. [ 180.093442][T16552] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4943'. [ 180.102697][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.114167][T16549] bond2: (slave veth15): Enslaving as an active interface with a down link [ 180.162479][T16549] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 180.195522][T16549] bond2: (slave batadv1): making interface the new active one [ 180.220593][T16549] batadv1: entered promiscuous mode [ 180.231861][T16549] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 180.388518][T16583] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4959'. [ 180.429547][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4959'. [ 180.508000][T16602] netlink: 'syz.5.4966': attribute type 1 has an invalid length. [ 180.547832][T16602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.586662][T16602] vlan0: entered allmulticast mode [ 180.591852][T16602] bond2: entered allmulticast mode [ 180.700145][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.815097][T16650] serio: Serial port ptm0 [ 181.004317][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.124255][ T29] kauditd_printk_skb: 845 callbacks suppressed [ 181.124274][ T29] audit: type=1400 audit(1751751018.983:6314): avc: denied { map_create } for pid=16673 comm="syz.0.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.169682][ T29] audit: type=1400 audit(1751751018.983:6315): avc: denied { prog_load } for pid=16673 comm="syz.0.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.189039][ T29] audit: type=1400 audit(1751751018.983:6316): avc: denied { prog_load } for pid=16673 comm="syz.0.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.208301][ T29] audit: type=1400 audit(1751751018.983:6317): avc: denied { map_create } for pid=16673 comm="syz.0.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.227788][ T29] audit: type=1400 audit(1751751018.983:6318): avc: denied { create } for pid=16673 comm="syz.0.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.248558][ T29] audit: type=1400 audit(1751751019.014:6319): avc: denied { map_create } for pid=16675 comm="syz.0.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.268104][ T29] audit: type=1400 audit(1751751019.014:6320): avc: denied { prog_load } for pid=16675 comm="syz.0.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.287307][ T29] audit: type=1400 audit(1751751019.014:6321): avc: denied { prog_load } for pid=16675 comm="syz.0.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.306761][ T29] audit: type=1400 audit(1751751019.014:6322): avc: denied { create } for pid=16675 comm="syz.0.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.327631][ T29] audit: type=1400 audit(1751751019.014:6323): avc: denied { create } for pid=16675 comm="syz.0.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.469417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.589822][T16708] all: renamed from lo [ 181.975749][T16773] netlink: 'syz.5.5045': attribute type 27 has an invalid length. [ 181.992779][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.003476][T16773] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.012162][T16773] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.020630][T16773] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.029047][T16773] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.037763][T16773] geneve2: left promiscuous mode [ 182.044680][T16773] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.053094][T16773] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.061479][T16773] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.069938][T16773] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.078518][T16773] vxlan0: left promiscuous mode [ 182.086533][T16776] bridge: RTM_NEWNEIGH with invalid ether address [ 182.109001][T16778] 8021q: adding VLAN 0 to HW filter on device  [ 182.117130][T16778] bridge0: port 1(dummy0) entered blocking state [ 182.123599][T16778] bridge0: port 1(dummy0) entered forwarding state [ 182.132695][T16778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.191026][T16780] syzkaller0: entered promiscuous mode [ 182.196782][T16780] syzkaller0: entered allmulticast mode [ 182.273619][T16800] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 182.612007][T16846] pim6reg1: entered promiscuous mode [ 182.617424][T16846] pim6reg1: entered allmulticast mode [ 182.694266][T16859] pim6reg1: entered promiscuous mode [ 182.699720][T16859] pim6reg1: entered allmulticast mode [ 182.836400][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.867402][T16876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16876 comm=syz.0.5089 [ 182.979071][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.987384][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.987412][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.053664][T16905] ip6gre1: entered allmulticast mode [ 183.966822][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.975095][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.087019][T17020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.095372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.356345][ T4669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.365884][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.409882][T17050] __nla_validate_parse: 11 callbacks suppressed [ 184.409901][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5167'. [ 184.439224][T17050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.472961][T17050] macvlan2: entered promiscuous mode [ 184.478336][T17050] macvlan2: entered allmulticast mode [ 184.502311][T17050] bond2: entered promiscuous mode [ 184.523360][T17050] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.547681][T17050] bond2: left promiscuous mode [ 184.964878][T17119] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5197'. [ 185.754330][T17142] validate_nla: 1 callbacks suppressed [ 185.754351][T17142] netlink: 'syz.0.5209': attribute type 6 has an invalid length. [ 185.808261][T17146] syzkaller0: entered promiscuous mode [ 185.813896][T17146] syzkaller0: entered allmulticast mode [ 185.897481][ T29] kauditd_printk_skb: 843 callbacks suppressed [ 185.897496][ T29] audit: type=1400 audit(1751751024.016:7167): avc: denied { read write } for pid=10103 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.964243][ T29] audit: type=1326 audit(1751751024.048:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 185.988701][ T29] audit: type=1326 audit(1751751024.048:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 186.012406][ T29] audit: type=1326 audit(1751751024.058:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 186.035992][ T29] audit: type=1326 audit(1751751024.058:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 186.059635][ T29] audit: type=1326 audit(1751751024.058:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 186.083258][ T29] audit: type=1326 audit(1751751024.058:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 186.091381][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5221'. [ 186.106859][ T29] audit: type=1326 audit(1751751024.058:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 186.139704][ T29] audit: type=1326 audit(1751751024.058:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 186.163234][ T29] audit: type=1326 audit(1751751024.058:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17157 comm="syz.0.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 186.757874][T17223] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5243'. [ 187.174506][T17238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17238 comm=syz.0.5248 [ 187.254273][T17239] syzkaller0: entered promiscuous mode [ 187.259821][T17239] syzkaller0: entered allmulticast mode [ 187.321897][T17254] ip6gre2: entered allmulticast mode [ 187.623032][ C0] net_ratelimit: 14 callbacks suppressed [ 187.623050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.804108][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5287'. [ 187.927048][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.935323][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.458877][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.512577][T17346] netlink: 'syz.8.5300': attribute type 1 has an invalid length. [ 188.531498][T17346] bond3: entered promiscuous mode [ 188.537006][T17346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.550841][T17346] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5300'. [ 188.563052][T17346] batadv1: entered promiscuous mode [ 188.568339][T17346] batadv1: entered allmulticast mode [ 188.574805][T17346] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 188.583710][T17346] bond3: (slave batadv1): making interface the new active one [ 188.592051][T17346] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 188.601432][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.619075][T17346] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5300'. [ 188.632603][T17346] batadv2: entered promiscuous mode [ 188.637849][T17346] batadv2: entered allmulticast mode [ 188.645500][T17346] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 188.654308][T17346] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 188.915149][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.923516][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.935112][T17385] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.5315'. [ 188.944364][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5315'. [ 188.970689][T17387] -1: renamed from syzkaller0 [ 188.980274][T17391] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5318'. [ 189.103780][T17401] netlink: 'syz.5.5323': attribute type 10 has an invalid length. [ 189.115942][T17401] ipvlan0: entered allmulticast mode [ 189.121306][T17401] veth0_vlan: entered allmulticast mode [ 189.258375][T17423] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 189.387723][T17441] serio: Serial port ptm0 [ 189.601046][T17445] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.5344'. [ 189.610328][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5344'. [ 189.769508][T17458] netlink: 'syz.5.5350': attribute type 1 has an invalid length. [ 189.787934][T17458] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 189.824428][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.903166][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.911443][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.990581][T17479] netlink: 'syz.8.5360': attribute type 4 has an invalid length. [ 190.333270][T17504] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 190.415535][T17515] netlink: 'syz.0.5374': attribute type 1 has an invalid length. [ 190.432010][T17515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.465984][T17515] bond4: (slave veth15): Enslaving as an active interface with a down link [ 190.484527][T17515] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.495687][T17515] bond4: (slave batadv1): making interface the new active one [ 190.504818][T17515] batadv1: entered promiscuous mode [ 190.510206][T17515] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 190.539592][ T4628] dummy0: left promiscuous mode [ 190.548225][T17522] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5379'. [ 190.565006][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5381'. [ 190.575784][T17528] netlink: 'syz.0.5380': attribute type 1 has an invalid length. [ 190.592865][T17528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.629510][T17528] bond5: (slave veth17): Enslaving as an active interface with a down link [ 190.656921][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 190.656938][ T29] audit: type=1400 audit(1751751029.028:7965): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.691003][ T29] audit: type=1400 audit(1751751029.038:7966): avc: denied { map_create } for pid=17534 comm="syz.8.5386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.693916][T17528] bond5: (slave dummy0): making interface the new active one [ 190.710343][ T29] audit: type=1400 audit(1751751029.038:7967): avc: denied { prog_load } for pid=17534 comm="syz.8.5386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.737287][T17537] netlink: 'syz.9.5385': attribute type 1 has an invalid length. [ 190.740403][ T29] audit: type=1400 audit(1751751029.091:7968): avc: denied { read write } for pid=17534 comm="syz.8.5386" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.745151][T17537] netlink: 'syz.9.5385': attribute type 4 has an invalid length. [ 190.775597][T17528] dummy0: entered promiscuous mode [ 190.776988][T17537] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.5385'. [ 190.782452][T17528] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 190.804258][ T29] audit: type=1400 audit(1751751029.175:7969): avc: denied { read write } for pid=10103 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.852871][T17537] netlink: 'syz.9.5385': attribute type 1 has an invalid length. [ 190.860858][T17537] netlink: 'syz.9.5385': attribute type 4 has an invalid length. [ 190.868764][T17537] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.5385'. [ 190.870349][ T29] audit: type=1400 audit(1751751029.186:7970): avc: denied { prog_load } for pid=17538 comm="syz.7.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.879204][ T4652] batadv1: left promiscuous mode [ 190.897274][ T29] audit: type=1400 audit(1751751029.207:7971): avc: denied { read write } for pid=7187 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.897326][ T29] audit: type=1400 audit(1751751029.207:7972): avc: denied { prog_load } for pid=17538 comm="syz.7.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.945769][ T29] audit: type=1400 audit(1751751029.207:7973): avc: denied { prog_load } for pid=17538 comm="syz.7.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.965254][ T29] audit: type=1400 audit(1751751029.207:7974): avc: denied { prog_load } for pid=17538 comm="syz.7.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 190.999416][T17552] netlink: 'syz.9.5393': attribute type 1 has an invalid length. [ 191.047688][T17552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.071308][T17552] vlan2: entered allmulticast mode [ 191.075813][T17560] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5396'. [ 191.076468][T17552] bond3: entered allmulticast mode [ 191.091403][T17563] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.5395'. [ 191.100624][T17563] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5395'. [ 191.117643][T17560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.129630][T17560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.140862][T17560] bond0 (unregistering): Released all slaves [ 191.297420][T17578] bond1: (slave dummy0): Releasing active interface [ 191.307391][T17578] bridge_slave_0: left promiscuous mode [ 191.313226][T17578] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.325295][T17578] bridge_slave_1: left allmulticast mode [ 191.331154][T17578] bridge_slave_1: left promiscuous mode [ 191.336922][T17578] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.350777][T17578] team0: Port device team_slave_0 removed [ 191.366621][T17578] team0: Port device team_slave_1 removed [ 191.372706][T17578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.385659][T17578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.397822][T17578] bond3: (slave batadv1): Releasing active interface [ 191.404762][T17578] bond3: (slave batadv1): the permanent HWaddr of slave - de:6c:3c:94:4d:39 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 191.422749][T17578] bond3: (slave batadv2): making interface the new active one [ 191.433283][T17578] bond3: (slave batadv2): Releasing active interface [ 191.499367][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5413'. [ 191.628738][T17615] netlink: 'syz.0.5421': attribute type 13 has an invalid length. [ 191.683383][T17615] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.690709][T17615] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.741336][T17615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.753027][T17615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.793327][T17615] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.802516][T17615] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.811676][T17615] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.820628][T17615] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.857517][T17639] xt_CT: No such helper "pptp" [ 192.571030][T17681] vlan2: entered allmulticast mode [ 192.576402][T17681] bond0: entered allmulticast mode [ 192.581580][T17681] bond_slave_0: entered allmulticast mode [ 192.587477][T17681] bond_slave_1: entered allmulticast mode [ 192.725787][T17701] netlink: 'syz.5.5473': attribute type 1 has an invalid length. [ 192.734080][T17703] netlink: 'syz.8.5462': attribute type 27 has an invalid length. [ 192.751571][T17701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.765690][T17703] ipvlan0: left allmulticast mode [ 192.770877][T17703] veth0_vlan: left allmulticast mode [ 192.790834][T17703] ip6gre1: left allmulticast mode [ 192.799680][T17703] bond3: left promiscuous mode [ 192.805635][T17703] batadv1: left promiscuous mode [ 192.810613][T17703] batadv1: left allmulticast mode [ 192.815793][T17703] batadv2: left promiscuous mode [ 192.820742][T17703] batadv2: left allmulticast mode [ 192.844129][T17712] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.854175][T17712] net_ratelimit: 8 callbacks suppressed [ 192.854185][T17712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.879729][T17701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.887365][T17701] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 192.898589][T17701] bond4: (slave vti0): Error -95 calling set_mac_address [ 192.940167][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.471508][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.537916][T17780] netlink: 'syz.0.5498': attribute type 1 has an invalid length. [ 193.555294][T17780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.573905][T17780] bond6: (slave gretap1): making interface the new active one [ 193.582366][T17780] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 193.603016][T17780] bond6 (unregistering): (slave gretap1): Releasing active interface [ 193.613466][T17780] bond6 (unregistering): Released all slaves [ 193.935421][T17832] erspan0: left promiscuous mode [ 193.940958][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.972164][T17832] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.985463][T17832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.506239][T17894] __nla_validate_parse: 16 callbacks suppressed [ 194.506259][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5547'. [ 194.526915][T17892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.537280][T17892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.556992][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5547'. [ 194.578471][T17894] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5547'. [ 194.618084][T17899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17899 comm=syz.8.5548 [ 194.658635][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5550'. [ 194.679168][T17901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.712676][T17901] macvlan2: entered promiscuous mode [ 194.718121][T17901] macvlan2: entered allmulticast mode [ 194.736796][T17901] bond4: entered promiscuous mode [ 194.745673][T17901] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.754008][T17901] bond4: left promiscuous mode [ 195.136669][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5564'. [ 195.270781][T17942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17942 comm=syz.5.5567 [ 195.291649][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5570'. [ 195.318138][T17944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5570'. [ 195.340107][T17944] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5570'. [ 195.419168][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5577'. [ 195.428327][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5577'. [ 195.441335][ T29] kauditd_printk_skb: 673 callbacks suppressed [ 195.441353][ T29] audit: type=1400 audit(1751751035.043:8648): avc: denied { read write } for pid=7187 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.494109][ T29] audit: type=1400 audit(1751751035.085:8649): avc: denied { prog_load } for pid=17965 comm="syz.0.5580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.498521][T17967] validate_nla: 7 callbacks suppressed [ 195.498609][T17967] netlink: 'syz.5.5581': attribute type 16 has an invalid length. [ 195.526800][T17967] netlink: 'syz.5.5581': attribute type 17 has an invalid length. [ 195.576334][ T29] audit: type=1400 audit(1751751035.159:8650): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.600697][ T29] audit: type=1400 audit(1751751035.159:8651): avc: denied { prog_load } for pid=17969 comm="syz.7.5582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.619934][ T29] audit: type=1400 audit(1751751035.159:8652): avc: denied { map_create } for pid=17969 comm="syz.7.5582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.639320][ T29] audit: type=1400 audit(1751751035.169:8653): avc: denied { read write } for pid=10103 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.663744][ T29] audit: type=1400 audit(1751751035.180:8654): avc: denied { watch watch_reads } for pid=17971 comm="syz.8.5583" path="/609" dev="tmpfs" ino=3150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 195.686919][ T29] audit: type=1400 audit(1751751035.180:8655): avc: denied { watch watch_reads } for pid=17971 comm="syz.8.5583" path="/609" dev="tmpfs" ino=3150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 195.710107][ T29] audit: type=1400 audit(1751751035.180:8656): avc: denied { map_create } for pid=17971 comm="syz.8.5583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.729520][ T29] audit: type=1400 audit(1751751035.180:8657): avc: denied { prog_load } for pid=17971 comm="syz.8.5583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 195.748982][T17967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.765540][T17979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.834067][T17986] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 195.840820][T17986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.848479][T17986] vhci_hcd vhci_hcd.0: Device attached [ 195.862968][T17981] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 195.869524][T17981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.877126][T17981] vhci_hcd vhci_hcd.0: Device attached [ 195.929285][T17981] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(5) [ 195.935890][T17981] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.943545][T17981] vhci_hcd vhci_hcd.0: Device attached [ 195.965096][T17981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.974431][T17981] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(11) [ 195.981091][T17981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.988833][T17981] vhci_hcd vhci_hcd.0: Device attached [ 195.999063][T17981] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(13) [ 196.005762][T17981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.013426][T17981] vhci_hcd vhci_hcd.0: Device attached [ 196.034693][T17981] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(15) [ 196.041355][T17981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.049097][T17981] vhci_hcd vhci_hcd.0: Device attached [ 196.078921][T17981] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(17) [ 196.085598][T17981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.093386][T17981] vhci_hcd vhci_hcd.0: Device attached [ 196.100955][ T2959] usb 17-2: new low-speed USB device number 2 using vhci_hcd [ 196.101063][T18009] vhci_hcd: connection closed [ 196.108803][T18003] vhci_hcd: connection closed [ 196.113791][T17998] vhci_hcd: connection closed [ 196.118771][T17996] vhci_hcd: connection closed [ 196.123946][T17987] vhci_hcd: connection closed [ 196.128855][ T4653] vhci_hcd: stop threads [ 196.132172][T17982] vhci_hcd: connection closed [ 196.133574][ T4653] vhci_hcd: release socket [ 196.138278][T17992] vhci_hcd: connection closed [ 196.142521][ T4653] vhci_hcd: disconnect device [ 196.150280][ T4653] vhci_hcd: stop threads [ 196.157533][T17988] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 196.160902][ T4653] vhci_hcd: release socket [ 196.171304][ T4653] vhci_hcd: disconnect device [ 196.177559][ T4653] vhci_hcd: stop threads [ 196.181868][ T4653] vhci_hcd: release socket [ 196.186379][ T4653] vhci_hcd: disconnect device [ 196.195573][ T4653] vhci_hcd: stop threads [ 196.199904][ T4653] vhci_hcd: release socket [ 196.204364][ T4653] vhci_hcd: disconnect device [ 196.229403][ T4653] vhci_hcd: stop threads [ 196.233823][ T4653] vhci_hcd: release socket [ 196.238293][ T4653] vhci_hcd: disconnect device [ 196.263495][ T4653] vhci_hcd: stop threads [ 196.267830][ T4653] vhci_hcd: release socket [ 196.272498][ T4653] vhci_hcd: disconnect device [ 196.279967][ T4653] vhci_hcd: stop threads [ 196.284298][ T4653] vhci_hcd: release socket [ 196.288748][ T4653] vhci_hcd: disconnect device [ 196.307404][T18024] netlink: 'syz.7.5597': attribute type 1 has an invalid length. [ 196.322492][T18024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.356047][T18024] bond3: (slave gretap1): making interface the new active one [ 196.369127][T18024] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 196.380362][T18028] netlink: 'syz.0.5599': attribute type 12 has an invalid length. [ 196.416182][T18030] netlink: 'syz.0.5600': attribute type 4 has an invalid length. [ 196.432157][T18024] bond3 (unregistering): (slave gretap1): Releasing active interface [ 196.441894][T18024] bond3 (unregistering): Released all slaves [ 196.761620][T18069] syzkaller0: entered promiscuous mode [ 196.767219][T18069] syzkaller0: entered allmulticast mode [ 196.933064][T18096] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 196.939700][T18096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.947373][T18096] vhci_hcd vhci_hcd.0: Device attached [ 196.975131][T18103] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 196.981778][T18103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.989426][T18103] vhci_hcd vhci_hcd.0: Device attached [ 197.014836][T18103] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 197.021463][T18103] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 197.029191][T18103] vhci_hcd vhci_hcd.0: Device attached [ 197.073020][T18096] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.083783][T18096] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(10) [ 197.090503][T18096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.098248][T18096] vhci_hcd vhci_hcd.0: Device attached [ 197.105012][T18096] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 197.111736][T18096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.119354][T18096] vhci_hcd vhci_hcd.0: Device attached [ 197.162034][T18096] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 197.168757][T18096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.176464][T18096] vhci_hcd vhci_hcd.0: Device attached [ 197.176834][ T3392] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 197.204215][T18103] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(18) [ 197.210962][T18103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.218720][T18103] vhci_hcd vhci_hcd.0: Device attached [ 197.228337][T18128] vhci_hcd: connection closed [ 197.228438][T18117] vhci_hcd: connection closed [ 197.228484][ T4652] vhci_hcd: stop threads [ 197.233343][T18119] vhci_hcd: connection closed [ 197.237883][ T4652] vhci_hcd: release socket [ 197.237901][ T4652] vhci_hcd: disconnect device [ 197.253017][T18104] vhci_hcd: connection closed [ 197.256348][T18097] vhci_hcd: connection reset by peer [ 197.257427][T18115] vhci_hcd: connection closed [ 197.261131][T18109] vhci_hcd: connection closed [ 197.271982][ T4652] vhci_hcd: stop threads [ 197.280959][ T4652] vhci_hcd: release socket [ 197.285521][ T4652] vhci_hcd: disconnect device [ 197.291211][ T4652] vhci_hcd: stop threads [ 197.295494][ T4652] vhci_hcd: release socket [ 197.299928][ T4652] vhci_hcd: disconnect device [ 197.305157][ T4652] vhci_hcd: stop threads [ 197.309459][ T4652] vhci_hcd: release socket [ 197.314012][ T4652] vhci_hcd: disconnect device [ 197.318931][ T4652] vhci_hcd: stop threads [ 197.323293][ T4652] vhci_hcd: release socket [ 197.327791][ T4652] vhci_hcd: disconnect device [ 197.335138][ T4652] vhci_hcd: stop threads [ 197.339466][ T4652] vhci_hcd: release socket [ 197.343935][ T4652] vhci_hcd: disconnect device [ 197.359006][ T4652] vhci_hcd: stop threads [ 197.363314][ T4652] vhci_hcd: release socket [ 197.367848][ T4652] vhci_hcd: disconnect device [ 198.414732][T18196] netlink: 'syz.0.5666': attribute type 1 has an invalid length. [ 198.459086][T18196] bond6: entered promiscuous mode [ 198.476214][T18196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.511213][T18198] batadv2: entered promiscuous mode [ 198.516495][T18198] batadv2: entered allmulticast mode [ 198.526692][T18198] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 198.535352][T18198] bond6: (slave batadv2): making interface the new active one [ 198.546064][T18198] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 198.576815][T18196] batadv3: entered promiscuous mode [ 198.582141][T18196] batadv3: entered allmulticast mode [ 198.588095][T18196] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 198.597473][T18196] bond6: (slave batadv3): Enslaving as an active interface with an up link [ 198.667160][T18214] netlink: 'syz.5.5673': attribute type 4 has an invalid length. [ 198.772270][T18235] netlink: 'syz.7.5683': attribute type 1 has an invalid length. [ 198.788063][T18235] bond3: entered promiscuous mode [ 198.793504][T18235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.823696][T18235] batadv1: entered promiscuous mode [ 198.829032][T18235] batadv1: entered allmulticast mode [ 198.837057][T18235] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 198.845471][T18235] bond3: (slave batadv1): making interface the new active one [ 198.854355][T18235] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 198.877370][T18246] netlink: 'syz.9.5686': attribute type 4 has an invalid length. [ 198.903573][T18235] batadv2: entered promiscuous mode [ 198.908866][T18235] batadv2: entered allmulticast mode [ 198.926114][T18235] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 198.934622][T18235] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 199.088308][T18277] netlink: 'syz.0.5709': attribute type 10 has an invalid length. [ 199.107160][T18277] bond5: (slave dummy0): Releasing active interface [ 199.131639][T18277] bridge0: port 3(dummy0) entered blocking state [ 199.138089][T18277] bridge0: port 3(dummy0) entered disabled state [ 199.154773][T18277] dummy0: entered allmulticast mode [ 199.398577][T18303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.415660][T18303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.498678][T18317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.507012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.542120][T18319] syzkaller0: entered promiscuous mode [ 199.547792][T18319] syzkaller0: entered allmulticast mode [ 199.838970][T18351] __nla_validate_parse: 15 callbacks suppressed [ 199.838986][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5733'. [ 200.077998][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5752'. [ 200.087008][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5752'. [ 200.168922][T18405] bond4: (slave bridge4): Enslaving as a backup interface with an up link [ 200.215993][ T29] kauditd_printk_skb: 711 callbacks suppressed [ 200.216091][ T29] audit: type=1400 audit(1751751040.072:9369): avc: denied { read write } for pid=12417 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.251754][ T29] audit: type=1400 audit(1751751040.072:9370): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.276427][ T29] audit: type=1400 audit(1751751040.072:9371): avc: denied { write } for pid=18415 comm="syz.7.5764" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 200.299543][ T29] audit: type=1400 audit(1751751040.072:9372): avc: denied { prog_load } for pid=18415 comm="syz.7.5764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.318910][ T29] audit: type=1400 audit(1751751040.072:9373): avc: denied { map_create } for pid=18415 comm="syz.7.5764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.338496][ T29] audit: type=1400 audit(1751751040.072:9374): avc: denied { prog_load } for pid=18415 comm="syz.7.5764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.357824][ T29] audit: type=1400 audit(1751751040.093:9375): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.382417][ T29] audit: type=1400 audit(1751751040.103:9376): avc: denied { create } for pid=18419 comm="syz.9.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 200.401963][ T29] audit: type=1400 audit(1751751040.103:9377): avc: denied { map_create } for pid=18419 comm="syz.9.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.421497][ T29] audit: type=1400 audit(1751751040.103:9378): avc: denied { prog_load } for pid=18419 comm="syz.9.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.693802][T18450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.702145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.948564][ T2959] usb 17-2: enqueue for inactive port 1 [ 200.963889][ T2959] usb 17-2: enqueue for inactive port 1 [ 201.043892][ T2959] vhci_hcd: vhci_device speed not set [ 201.135746][T18462] validate_nla: 6 callbacks suppressed [ 201.135765][T18462] netlink: 'syz.5.5783': attribute type 2 has an invalid length. [ 201.141463][T18486] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 201.313499][T18496] netlink: 'syz.9.5800': attribute type 10 has an invalid length. [ 201.332695][T18496] bond1: (slave dummy0): Releasing active interface [ 201.348848][T18496] team0: Port device dummy0 added [ 201.358696][T18496] netlink: 'syz.9.5800': attribute type 10 has an invalid length. [ 201.369675][T18496] team0: Port device dummy0 removed [ 201.377458][T18496] dummy0: entered allmulticast mode [ 201.383565][T18496] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.668612][T18520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.676978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.895568][T18542] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5819'. [ 201.922959][T18542] team0: Port device bond0 removed [ 201.935394][T18542] bond0 (unregistering): Released all slaves [ 202.006457][ T3392] usb 1-1: enqueue for inactive port 0 [ 202.015449][ T3392] usb 1-1: enqueue for inactive port 0 [ 202.073408][T18554] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5823'. [ 202.110923][ T3392] vhci_hcd: vhci_device speed not set [ 202.312581][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5834'. [ 202.374247][T18585] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5837'. [ 202.387343][T18585] 0·: renamed from hsr_slave_1 [ 202.394233][T18585] 0·: entered allmulticast mode [ 202.399657][T18585] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 202.561166][T18611] netlink: 'syz.9.5850': attribute type 27 has an invalid length. [ 202.598031][T18611] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.605425][T18611] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.667832][T18611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.678083][T18611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.709969][T18611] team1: left promiscuous mode [ 202.715238][T18611] team1: left allmulticast mode [ 202.723914][T18611] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.733230][T18611] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.742342][T18611] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.751455][T18611] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.760983][T18611] geneve2: left promiscuous mode [ 202.764872][T18624] netlink: 'syz.0.5854': attribute type 1 has an invalid length. [ 202.799400][T18614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.810728][T18614] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.820480][T18614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.837475][T18616] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 202.857330][T18624] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.887333][T18625] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.894792][T18625] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 202.905980][T18625] bond7: (slave vti0): Error -95 calling set_mac_address [ 202.929091][T18632] netlink: 'syz.7.5866': attribute type 13 has an invalid length. [ 203.170535][T18659] netlink: 'syz.7.5868': attribute type 1 has an invalid length. [ 203.205177][T18659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.218482][T18665] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 203.231202][T18659] vlan2: entered allmulticast mode [ 203.236478][T18659] bond0: entered allmulticast mode [ 203.699981][T18696] syzkaller0: entered promiscuous mode [ 203.705679][T18696] syzkaller0: entered allmulticast mode [ 203.835189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.843462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.208748][T18730] syzkaller0: entered promiscuous mode [ 204.214295][T18730] syzkaller0: entered allmulticast mode [ 204.834460][T18781] netlink: 'syz.8.5919': attribute type 1 has an invalid length. [ 204.859591][T18781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.906213][T18786] netlink: 'syz.7.5920': attribute type 1 has an invalid length. [ 204.921822][T18781] vlan2: entered allmulticast mode [ 204.927009][T18781] bond0: entered allmulticast mode [ 204.953425][T18786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.990158][T18786] macvlan2: entered promiscuous mode [ 204.995563][T18786] macvlan2: entered allmulticast mode [ 205.021219][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 205.021238][ T29] audit: type=1400 audit(1751751045.111:10016): avc: denied { read write } for pid=10103 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.093413][T18786] bond5: entered promiscuous mode [ 205.104749][T18786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.131084][T18786] bond5: left promiscuous mode [ 205.136145][ T29] audit: type=1400 audit(1751751045.153:10017): avc: denied { map_create } for pid=18790 comm="syz.8.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.155613][ T29] audit: type=1326 audit(1751751045.153:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18790 comm="syz.8.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60384e929 code=0x7ffc0000 [ 205.179248][ T29] audit: type=1326 audit(1751751045.153:10019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18790 comm="syz.8.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60384e929 code=0x7ffc0000 [ 205.202981][ T29] audit: type=1326 audit(1751751045.153:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18790 comm="syz.8.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7ff60384e929 code=0x7ffc0000 [ 205.226741][ T29] audit: type=1326 audit(1751751045.153:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18790 comm="syz.8.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60384e929 code=0x7ffc0000 [ 205.250367][ T29] audit: type=1400 audit(1751751045.174:10022): avc: denied { read write } for pid=10103 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.274795][ T29] audit: type=1400 audit(1751751045.195:10023): avc: denied { prog_load } for pid=18792 comm="syz.8.5923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.294607][ T29] audit: type=1400 audit(1751751045.205:10024): avc: denied { create } for pid=18792 comm="syz.8.5923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 205.315290][ T29] audit: type=1400 audit(1751751045.205:10025): avc: denied { create } for pid=18792 comm="syz.8.5923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 205.452582][T18807] ip6gre2: entered allmulticast mode [ 205.600587][T18828] netlink: 'syz.7.5939': attribute type 27 has an invalid length. [ 205.633778][T18828] bond3: left promiscuous mode [ 205.638768][T18828] batadv1: left promiscuous mode [ 205.643836][T18828] batadv1: left allmulticast mode [ 205.649026][T18828] batadv2: left promiscuous mode [ 205.653996][T18828] batadv2: left allmulticast mode [ 205.701336][T18833] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.748866][T18833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.764573][T18836] dummy0: left allmulticast mode [ 205.779145][T18836] dummy0: left promiscuous mode [ 205.784284][T18836] bridge0: port 3(dummy0) entered disabled state [ 205.821186][T18843] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 205.885150][T18848] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.902588][T18848] vlan2: entered allmulticast mode [ 205.907823][T18848] bond5: entered allmulticast mode [ 206.207262][T18877] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.5956'. [ 206.216533][T18877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5956'. [ 206.249331][T18878] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5959'. [ 206.644929][T18909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.746726][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5982'. [ 206.866646][T18937] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5986'. [ 207.086529][T18958] ÿÿÿÿÿÿ: renamed from vlan1 [ 207.439834][T18978] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.6003'. [ 207.449102][T18978] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6003'. [ 207.469211][T18980] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 207.587305][T18992] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6011'. [ 207.684385][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6015'. [ 207.867025][T19018] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 207.949054][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6029'. [ 208.409915][T19067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.418232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.635743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.644307][ T4652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.653552][T19066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.662078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.795264][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 209.795278][ T29] audit: type=1400 audit(1751751050.118:10629): avc: denied { read write } for pid=12417 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.853027][ T29] audit: type=1400 audit(1751751050.171:10630): avc: denied { prog_load } for pid=19137 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 209.871803][ T29] audit: type=1400 audit(1751751050.171:10631): avc: denied { read } for pid=19137 comm="gtp" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 209.894344][ T29] audit: type=1400 audit(1751751050.171:10632): avc: denied { write } for pid=19137 comm="gtp" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 209.916782][ T29] audit: type=1400 audit(1751751050.181:10633): avc: denied { read write } for pid=7532 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.945152][ T29] audit: type=1400 audit(1751751050.223:10634): avc: denied { read write } for pid=7187 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.969560][ T29] audit: type=1400 audit(1751751050.255:10635): avc: denied { read write } for pid=12417 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.994118][ T29] audit: type=1400 audit(1751751050.276:10636): avc: denied { map_create } for pid=19141 comm="syz.7.6078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 210.013481][ T29] audit: type=1400 audit(1751751050.276:10637): avc: denied { prog_load } for pid=19141 comm="syz.7.6078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 210.032889][ T29] audit: type=1400 audit(1751751050.276:10638): avc: denied { prog_load } for pid=19141 comm="syz.7.6078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 210.103335][T19152] team0 (unregistering): Port device team_slave_0 removed [ 210.120151][T19152] team0 (unregistering): Port device team_slave_1 removed [ 210.663927][T19246] validate_nla: 3 callbacks suppressed [ 210.663941][T19246] netlink: 'syz.9.6130': attribute type 10 has an invalid length. [ 210.729772][T19253] wg2: entered promiscuous mode [ 210.735019][T19253] wg2: entered allmulticast mode [ 211.003290][T19285] netlink: 'syz.5.6148': attribute type 4 has an invalid length. [ 211.027328][T19285] netlink: 'syz.5.6148': attribute type 4 has an invalid length. [ 211.074579][T19290] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 211.168153][T19300] __nla_validate_parse: 15 callbacks suppressed [ 211.168171][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6155'. [ 211.322758][T19314] netlink: 'syz.9.6161': attribute type 4 has an invalid length. [ 211.349332][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6163'. [ 211.387454][T19323] wg2: left promiscuous mode [ 211.392192][T19323] wg2: left allmulticast mode [ 211.399344][ T4627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.407626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.414327][T19323] wg2: entered promiscuous mode [ 211.420883][T19323] wg2: entered allmulticast mode [ 211.531315][T19339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2151 sclass=netlink_route_socket pid=19339 comm=syz.5.6173 [ 211.639501][T19357] netlink: 'syz.0.6182': attribute type 1 has an invalid length. [ 211.676956][T19357] bond8: entered promiscuous mode [ 211.682158][T19357] bond8: entered allmulticast mode [ 211.687774][T19357] 8021q: adding VLAN 0 to HW filter on device bond8 [ 211.705092][T19357] ip6gretap1: entered promiscuous mode [ 211.710788][T19357] ip6gretap1: entered allmulticast mode [ 211.717087][T19357] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 211.779382][ T4653] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 211.893738][ T4653] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 212.004474][T19386] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6196'. [ 212.757242][T19408] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6206'. [ 213.023273][T19430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19430 comm=syz.9.6213 [ 213.177218][T19438] netlink: 'syz.0.6219': attribute type 1 has an invalid length. [ 213.233323][T19438] 8021q: adding VLAN 0 to HW filter on device bond9 [ 213.266231][T19445] vlan2: entered allmulticast mode [ 213.271424][T19445] geneve1: entered allmulticast mode [ 213.355247][T19445] bond9: (slave vlan2): Opening slave failed [ 213.491183][T19465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6230'. [ 213.503283][T19466] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6227'. [ 213.518079][T19466] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6227'. [ 213.611763][T19479] $Hÿ: renamed from bond0 (while UP) [ 213.619421][T19479] $Hÿ: entered promiscuous mode [ 213.624525][T19479] bond_slave_0: entered promiscuous mode [ 213.630472][T19479] bond_slave_1: entered promiscuous mode [ 213.649532][T19479] dummy0: entered promiscuous mode [ 213.665719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.014503][T19538] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 214.021149][T19538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 214.028953][T19538] vhci_hcd vhci_hcd.0: Device attached [ 214.051657][T19539] vhci_hcd: connection closed [ 214.057729][ T4628] vhci_hcd: stop threads [ 214.066796][ T4628] vhci_hcd: release socket [ 214.071242][ T4628] vhci_hcd: disconnect device [ 214.151665][ T9] IPVS: starting estimator thread 0... [ 214.157309][T19546] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.236896][T19548] IPVS: using max 2256 ests per chain, 112800 per kthread [ 214.464991][T19567] ip6tnl4: entered promiscuous mode [ 214.567440][ T29] kauditd_printk_skb: 848 callbacks suppressed [ 214.567459][ T29] audit: type=1326 audit(1751751055.126:11487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19565 comm="syz.0.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4deba458e7 code=0x7ffc0000 [ 214.568042][T19573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.573764][ T29] audit: type=1326 audit(1751751055.126:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19565 comm="syz.0.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4deb9eab19 code=0x7ffc0000 [ 214.597327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.605386][ T29] audit: type=1326 audit(1751751055.126:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19565 comm="syz.0.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 214.660449][ T29] audit: type=1400 audit(1751751055.126:11490): avc: denied { read write } for pid=19572 comm="syz.8.6276" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 214.685142][ T29] audit: type=1400 audit(1751751055.126:11491): avc: denied { prog_load } for pid=19572 comm="syz.8.6276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 214.704504][ T29] audit: type=1400 audit(1751751055.126:11492): avc: denied { name_bind } for pid=19572 comm="syz.8.6276" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 214.725872][ T29] audit: type=1326 audit(1751751055.252:11493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19565 comm="syz.0.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4deba458e7 code=0x7ffc0000 [ 214.749473][ T29] audit: type=1326 audit(1751751055.252:11494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19565 comm="syz.0.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4deb9eab19 code=0x7ffc0000 [ 214.773185][ T29] audit: type=1326 audit(1751751055.252:11495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19565 comm="syz.0.6274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4deba4e929 code=0x7ffc0000 [ 214.821491][ T29] audit: type=1400 audit(1751751055.294:11496): avc: denied { read write } for pid=10103 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 215.007435][T19595] netlink: 'syz.5.6286': attribute type 4 has an invalid length. [ 215.083332][T19603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.096433][T19603] vlan1: entered allmulticast mode [ 215.101690][T19603] bond0: entered allmulticast mode [ 215.148429][T19610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.155815][T19610] IPv6: NLM_F_CREATE should be set when creating new route [ 215.298105][T19630] netlink: 'syz.8.6303': attribute type 1 has an invalid length. [ 215.330762][T19630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.370502][T19630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.377794][T19630] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 215.389979][T19630] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 215.405699][T19646] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6304'. [ 215.417749][T19635] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6304'. [ 215.900841][T19701] netlink: 'syz.8.6330': attribute type 1 has an invalid length. [ 215.924773][T19701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.937327][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6330'. [ 215.961481][T19701] bond5 (unregistering): Released all slaves [ 216.006179][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6333'. [ 216.053807][T19714] netlink: 'syz.8.6336': attribute type 1 has an invalid length. [ 216.083191][T19714] bond5: entered promiscuous mode [ 216.088491][T19714] bond5: entered allmulticast mode [ 216.096860][T19714] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.216631][T19731] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6343'. [ 216.638511][ T4669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.646853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.734502][T19778] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6366'. [ 216.986415][T19808] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6380'. [ 217.426265][T19870] netlink: 'syz.5.6406': attribute type 10 has an invalid length. [ 217.434321][T19870] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6406'. [ 217.476184][T19873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6407'. [ 217.909907][T19900] netlink: 'syz.8.6420': attribute type 10 has an invalid length. [ 217.917868][T19900] netlink: 55 bytes leftover after parsing attributes in process `syz.8.6420'. [ 217.942746][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6418'. [ 218.035678][T19913] wg2: entered promiscuous mode [ 218.040618][T19913] wg2: entered allmulticast mode [ 218.094013][T19917] netlink: 'syz.0.6427': attribute type 39 has an invalid length. [ 218.231948][T19929] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.598257][T19960] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6446'. [ 219.334092][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 219.334110][ T29] audit: type=1400 audit(1751751060.133:12575): avc: denied { map_create } for pid=20007 comm="syz.5.6469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 219.382542][ T29] audit: type=1400 audit(1751751060.154:12576): avc: denied { prog_load } for pid=20007 comm="syz.5.6469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 219.401898][ T29] audit: type=1400 audit(1751751060.154:12577): avc: denied { map_create } for pid=20010 comm="syz.9.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 219.421741][ T29] audit: type=1400 audit(1751751060.154:12578): avc: denied { prog_load } for pid=20007 comm="syz.5.6469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 219.440990][ T29] audit: type=1400 audit(1751751060.154:12579): avc: denied { open } for pid=20007 comm="syz.5.6469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 219.460562][ T29] audit: type=1400 audit(1751751060.175:12580): avc: denied { prog_load } for pid=20010 comm="syz.9.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 219.479867][ T29] audit: type=1400 audit(1751751060.175:12581): avc: denied { prog_load } for pid=20010 comm="syz.9.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 219.499127][ T29] audit: type=1400 audit(1751751060.186:12582): avc: denied { prog_load } for pid=20010 comm="syz.9.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 219.518665][ T29] audit: type=1400 audit(1751751060.196:12583): avc: denied { read write } for pid=7187 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 219.542986][ T29] audit: type=1400 audit(1751751060.238:12584): avc: denied { read write } for pid=20010 comm="syz.9.6470" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 219.775229][T20026] hsr_slave_0: left promiscuous mode [ 219.788961][T20026] 0·: left promiscuous mode [ 219.926522][T20036] netlink: 'syz.8.6481': attribute type 10 has an invalid length. [ 219.934531][T20036] dummy0: entered promiscuous mode [ 219.940425][T20036] bridge0: port 1(dummy0) entered blocking state [ 219.947005][T20036] bridge0: port 1(dummy0) entered disabled state [ 219.956345][T20036] dummy0: entered allmulticast mode [ 219.964659][T20036] bridge0: port 1(dummy0) entered blocking state [ 219.971092][T20036] bridge0: port 1(dummy0) entered forwarding state [ 219.994076][T20042] pim6reg1: entered promiscuous mode [ 219.999472][T20042] pim6reg1: entered allmulticast mode [ 220.201951][T20076] macvtap0: entered promiscuous mode [ 220.207986][T20076] macvtap0: left promiscuous mode [ 220.651966][T20108] ================================================================== [ 220.660093][T20108] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 220.666530][T20108] [ 220.668863][T20108] write to 0xffffc9000183bbc0 of 4 bytes by task 20101 on cpu 1: [ 220.676598][T20108] pollwake+0xb6/0x100 [ 220.680681][T20108] __wake_up+0x66/0xb0 [ 220.684775][T20108] ep_poll_callback+0x3d6/0x550 [ 220.689644][T20108] __wake_up+0x66/0xb0 [ 220.693739][T20108] ep_poll_callback+0x3d6/0x550 [ 220.698609][T20108] __wake_up+0x66/0xb0 [ 220.702743][T20108] unix_dgram_peer_wake_relay+0xd3/0xf0 [ 220.708347][T20108] __wake_up_sync_key+0x52/0x80 [ 220.713246][T20108] __unix_dgram_recvmsg+0x3b2/0x840 [ 220.718466][T20108] unix_dgram_recvmsg+0x81/0x90 [ 220.723344][T20108] sock_recvmsg_nosec+0x104/0x130 [ 220.728394][T20108] ____sys_recvmsg+0x26f/0x280 [ 220.733182][T20108] ___sys_recvmsg+0x11f/0x370 [ 220.737874][T20108] do_recvmmsg+0x1ef/0x540 [ 220.742303][T20108] __x64_sys_recvmmsg+0xe5/0x170 [ 220.747259][T20108] x64_sys_call+0x1c6a/0x2fb0 [ 220.751968][T20108] do_syscall_64+0xd2/0x200 [ 220.756488][T20108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.762402][T20108] [ 220.764735][T20108] read to 0xffffc9000183bbc0 of 4 bytes by task 20108 on cpu 0: [ 220.772377][T20108] do_sys_poll+0x99c/0xbd0 [ 220.776809][T20108] __se_sys_ppoll+0x1b9/0x200 [ 220.781499][T20108] __x64_sys_ppoll+0x67/0x80 [ 220.786102][T20108] x64_sys_call+0x2de5/0x2fb0 [ 220.790796][T20108] do_syscall_64+0xd2/0x200 [ 220.795338][T20108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.801247][T20108] [ 220.803583][T20108] value changed: 0x00000000 -> 0x00000001 [ 220.809313][T20108] [ 220.811646][T20108] Reported by Kernel Concurrency Sanitizer on: [ 220.817819][T20108] CPU: 0 UID: 0 PID: 20108 Comm: syz.7.6511 Tainted: G W 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 220.831911][T20108] Tainted: [W]=WARN [ 220.835740][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.845827][T20108] ================================================================== [ 221.515287][ T4653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.523472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.001619][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.009878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog