last executing test programs: 806.502285ms ago: executing program 1 (id=501): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x17, 0x40, 0x6, 0x0, 0x0, 0x10609, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0xffff, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 747.034196ms ago: executing program 1 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100005ff000000007f8f96c50000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x44}}, 0x0) 588.419779ms ago: executing program 1 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) getpriority(0x2, 0x0) 522.62831ms ago: executing program 1 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 355.746043ms ago: executing program 3 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 355.512533ms ago: executing program 4 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 334.938963ms ago: executing program 2 (id=524): r0 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x87) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) 330.578513ms ago: executing program 1 (id=525): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0xff}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 328.247174ms ago: executing program 4 (id=526): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) 307.744074ms ago: executing program 1 (id=528): r0 = io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x446c5}) close(r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 291.889534ms ago: executing program 3 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec00000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b37a120", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 272.368095ms ago: executing program 2 (id=531): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) timer_delete(0x0) 237.830816ms ago: executing program 4 (id=532): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="710505f1030202060e0310eb6601560308012f"], 0x13) 237.713005ms ago: executing program 0 (id=533): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 237.283126ms ago: executing program 4 (id=542): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x2005}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x651, 0xd}, 0x90) 195.524806ms ago: executing program 3 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 195.140036ms ago: executing program 0 (id=535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @random="1794088d9ffe", @void, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x1a, 0x1, 0x0, 0x0, "056cf6ce6c111d3a0ffea7204546e4f6f9b38f318935fae60cdd9ff2286c4ce0ef3e0354c179b573f80979520796875aa7675647f804144ba3cd62f16a283d9c"}}}}, 0x0) 192.800496ms ago: executing program 2 (id=536): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x69e5, 0x10000, 0x0, 0x295, 0x0, r0}, &(0x7f00000003c0)=0x0, &(0x7f0000001040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 190.111636ms ago: executing program 4 (id=537): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r1, &(0x7f0000006240)='-1\x00', 0x3) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000002000)={0x1f, 0x3, 0x2}, 0x6) 185.533906ms ago: executing program 3 (id=538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 158.527437ms ago: executing program 0 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 153.281887ms ago: executing program 4 (id=540): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 131.719358ms ago: executing program 0 (id=541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47d0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) uname(0x0) 126.505978ms ago: executing program 2 (id=543): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002c00020000000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000140008"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 121.348208ms ago: executing program 3 (id=544): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='page_pool_state_release\x00', r0}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 94.020368ms ago: executing program 0 (id=545): unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 85.785548ms ago: executing program 2 (id=546): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) 80.058718ms ago: executing program 3 (id=547): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x3208446, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 26.97597ms ago: executing program 2 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x20004000) 0s ago: executing program 0 (id=549): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 33.393606][ T3294] cgroup: Unknown subsys name 'net' [ 33.399172][ T29] audit: type=1400 audit(1757464477.768:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.421938][ T29] audit: type=1400 audit(1757464477.768:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.444134][ T29] audit: type=1400 audit(1757464477.768:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.562193][ T3294] cgroup: Unknown subsys name 'cpuset' [ 33.568566][ T3294] cgroup: Unknown subsys name 'rlimit' [ 33.680555][ T29] audit: type=1400 audit(1757464478.048:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.706533][ T29] audit: type=1400 audit(1757464478.048:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.724232][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.727195][ T29] audit: type=1400 audit(1757464478.048:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.756104][ T29] audit: type=1400 audit(1757464478.048:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.766582][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.776564][ T29] audit: type=1400 audit(1757464478.048:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.810236][ T29] audit: type=1400 audit(1757464478.048:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.833970][ T29] audit: type=1400 audit(1757464478.118:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.939508][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 34.989058][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 34.997750][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.054690][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.077459][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.094908][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.102080][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.109357][ T3307] bridge_slave_0: entered allmulticast mode [ 35.116007][ T3307] bridge_slave_0: entered promiscuous mode [ 35.142086][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.149155][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.156330][ T3307] bridge_slave_1: entered allmulticast mode [ 35.162750][ T3307] bridge_slave_1: entered promiscuous mode [ 35.196028][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.203196][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.210397][ T3305] bridge_slave_0: entered allmulticast mode [ 35.216906][ T3305] bridge_slave_0: entered promiscuous mode [ 35.224402][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.231553][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.238856][ T3303] bridge_slave_0: entered allmulticast mode [ 35.245407][ T3303] bridge_slave_0: entered promiscuous mode [ 35.261668][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.268828][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.276137][ T3305] bridge_slave_1: entered allmulticast mode [ 35.282499][ T3305] bridge_slave_1: entered promiscuous mode [ 35.293559][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.300729][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.307900][ T3303] bridge_slave_1: entered allmulticast mode [ 35.314296][ T3303] bridge_slave_1: entered promiscuous mode [ 35.321772][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.354970][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.365295][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.378803][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.385932][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.393437][ T3310] bridge_slave_0: entered allmulticast mode [ 35.399881][ T3310] bridge_slave_0: entered promiscuous mode [ 35.414497][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.424876][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.434045][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.441156][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.448382][ T3310] bridge_slave_1: entered allmulticast mode [ 35.454881][ T3310] bridge_slave_1: entered promiscuous mode [ 35.477457][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.497198][ T3307] team0: Port device team_slave_0 added [ 35.517964][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.525084][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.532670][ T3312] bridge_slave_0: entered allmulticast mode [ 35.539158][ T3312] bridge_slave_0: entered promiscuous mode [ 35.546421][ T3307] team0: Port device team_slave_1 added [ 35.562723][ T3305] team0: Port device team_slave_0 added [ 35.569089][ T3303] team0: Port device team_slave_0 added [ 35.576157][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.585516][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.592641][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.599966][ T3312] bridge_slave_1: entered allmulticast mode [ 35.606678][ T3312] bridge_slave_1: entered promiscuous mode [ 35.618473][ T3305] team0: Port device team_slave_1 added [ 35.625989][ T3303] team0: Port device team_slave_1 added [ 35.637535][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.655932][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.662980][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.689002][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.720410][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.735458][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.742589][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.768568][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.779726][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.786755][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.812852][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.825449][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.832469][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.858558][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.870380][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.885662][ T3310] team0: Port device team_slave_0 added [ 35.895119][ T3310] team0: Port device team_slave_1 added [ 35.907170][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.914168][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.940190][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.951494][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.958545][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.984559][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.013627][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.020725][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.046671][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.060749][ T3312] team0: Port device team_slave_0 added [ 36.067739][ T3312] team0: Port device team_slave_1 added [ 36.080220][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.087218][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.113189][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.137504][ T3307] hsr_slave_0: entered promiscuous mode [ 36.143663][ T3307] hsr_slave_1: entered promiscuous mode [ 36.171274][ T3305] hsr_slave_0: entered promiscuous mode [ 36.177422][ T3305] hsr_slave_1: entered promiscuous mode [ 36.183508][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.189328][ T3305] Cannot create hsr debugfs directory [ 36.199974][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.207042][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.233118][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.245339][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.252312][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.278429][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.320773][ T3310] hsr_slave_0: entered promiscuous mode [ 36.327029][ T3310] hsr_slave_1: entered promiscuous mode [ 36.332856][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.338591][ T3310] Cannot create hsr debugfs directory [ 36.346016][ T3303] hsr_slave_0: entered promiscuous mode [ 36.351980][ T3303] hsr_slave_1: entered promiscuous mode [ 36.357847][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.363602][ T3303] Cannot create hsr debugfs directory [ 36.394964][ T3312] hsr_slave_0: entered promiscuous mode [ 36.400962][ T3312] hsr_slave_1: entered promiscuous mode [ 36.406882][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 36.412663][ T3312] Cannot create hsr debugfs directory [ 36.605713][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.614485][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.625915][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.637039][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.656570][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.677906][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.690264][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.702262][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.712715][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.732655][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.744017][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.753042][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.785344][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.795910][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.806235][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.814770][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.825284][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.869269][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.883418][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.893166][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.903535][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.917532][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.935270][ T2544] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.942484][ T2544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.988533][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.005411][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.012548][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.034355][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.045019][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.061826][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.078066][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.091089][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.107692][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.114919][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.124639][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.131726][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.140649][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.147754][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.158532][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.173448][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.180562][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.190954][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.198079][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.206700][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.213775][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.235501][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.257588][ T2544] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.264796][ T2544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.281306][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.288483][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.343305][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.366861][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.377433][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.398399][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.423276][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.500702][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.521123][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.535392][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.554941][ T3305] veth0_vlan: entered promiscuous mode [ 37.567392][ T3305] veth1_vlan: entered promiscuous mode [ 37.608497][ T3305] veth0_macvtap: entered promiscuous mode [ 37.643307][ T3310] veth0_vlan: entered promiscuous mode [ 37.654319][ T3305] veth1_macvtap: entered promiscuous mode [ 37.666071][ T3310] veth1_vlan: entered promiscuous mode [ 37.684569][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.708869][ T3310] veth0_macvtap: entered promiscuous mode [ 37.722257][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.738858][ T3307] veth0_vlan: entered promiscuous mode [ 37.755767][ T2544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.765274][ T3310] veth1_macvtap: entered promiscuous mode [ 37.784956][ T2544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.795145][ T3307] veth1_vlan: entered promiscuous mode [ 37.807445][ T2544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.826435][ T3307] veth0_macvtap: entered promiscuous mode [ 37.833817][ T3312] veth0_vlan: entered promiscuous mode [ 37.843878][ T2544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.856781][ T3307] veth1_macvtap: entered promiscuous mode [ 37.866463][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.883648][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.887738][ T3303] veth0_vlan: entered promiscuous mode [ 37.907324][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.922751][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.931138][ T3312] veth1_vlan: entered promiscuous mode [ 37.944818][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.953043][ T3303] veth1_vlan: entered promiscuous mode [ 37.964783][ T294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.993979][ T294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.028032][ T3303] veth0_macvtap: entered promiscuous mode [ 38.040724][ T3312] veth0_macvtap: entered promiscuous mode [ 38.056862][ T294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.074794][ T3303] veth1_macvtap: entered promiscuous mode [ 38.082757][ T3312] veth1_macvtap: entered promiscuous mode [ 38.094300][ T3479] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 38.094884][ T294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.125363][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.144835][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.159997][ T294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.186406][ T294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.196865][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.215532][ T3484] loop3: detected capacity change from 0 to 2048 [ 38.227563][ T294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.249501][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.257734][ T3292] loop3: p3 p4 < > [ 38.264529][ T294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.276187][ T3292] loop3: p3 start 11362048 is beyond EOD, truncated [ 38.279728][ T294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.293384][ T294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.304466][ T294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.314012][ T294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.322293][ T3488] loop9: detected capacity change from 0 to 7 [ 38.327597][ T294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.329736][ T3488] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.347277][ T2544] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 38.347626][ T3488] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.360392][ T3484] loop3: p3 p4 < > [ 38.365321][ T3488] loop9: unable to read partition table [ 38.375141][ T3488] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 38.375141][ T3488] ) failed (rc=-5) [ 38.375972][ T294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.389504][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.405345][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.411176][ T3484] loop3: p3 start 11362048 is beyond EOD, truncated [ 38.413417][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.428273][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.440687][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.466796][ T294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.511508][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 38.525201][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 38.525253][ T29] audit: type=1400 audit(1757464482.898:123): avc: denied { create } for pid=3502 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.536549][ T294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.570301][ T29] audit: type=1400 audit(1757464482.938:124): avc: denied { allowed } for pid=3501 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.595168][ T29] audit: type=1400 audit(1757464482.968:125): avc: denied { bind } for pid=3502 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.614259][ T29] audit: type=1400 audit(1757464482.968:126): avc: denied { read } for pid=3502 comm="syz.2.13" path="socket:[4738]" dev="sockfs" ino=4738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.638230][ T29] audit: type=1400 audit(1757464482.968:127): avc: denied { create } for pid=3501 comm="syz.3.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.685333][ T29] audit: type=1400 audit(1757464483.038:128): avc: denied { create } for pid=3509 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.704968][ T29] audit: type=1400 audit(1757464483.038:129): avc: denied { write } for pid=3509 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.731167][ T29] audit: type=1400 audit(1757464483.108:130): avc: denied { create } for pid=3511 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.750626][ T29] audit: type=1400 audit(1757464483.108:131): avc: denied { create } for pid=3512 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.770883][ T29] audit: type=1400 audit(1757464483.108:132): avc: denied { write } for pid=3512 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.124156][ T3552] loop0: detected capacity change from 0 to 512 [ 39.138567][ T3552] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.203831][ T3556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.212161][ T3556] bridge0: port 3(bond1) entered blocking state [ 39.218536][ T3556] bridge0: port 3(bond1) entered disabled state [ 39.225129][ T3556] bond1: entered allmulticast mode [ 39.231732][ T3556] bond1: entered promiscuous mode [ 39.239155][ T3556] bridge0: port 3(bond1) entered blocking state [ 39.242767][ T3559] sctp: [Deprecated]: syz.0.35 (pid 3559) Use of int in max_burst socket option deprecated. [ 39.242767][ T3559] Use struct sctp_assoc_value instead [ 39.245568][ T3556] bridge0: port 3(bond1) entered forwarding state [ 39.269857][ T59] bridge0: port 3(bond1) entered disabled state [ 39.332749][ T3562] syz.0.36 (3562) used greatest stack depth: 10680 bytes left [ 39.348665][ T3567] netlink: 750 bytes leftover after parsing attributes in process `syz.0.38'. [ 39.349068][ T3508] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 39.413608][ T3573] openvswitch: netlink: Message has 6 unknown bytes. [ 39.503182][ T3579] loop4: detected capacity change from 0 to 128 [ 39.516841][ T3579] FAT-fs (loop4): Directory bread(block 32) failed [ 39.537268][ T3579] FAT-fs (loop4): Directory bread(block 33) failed [ 39.544283][ T3579] FAT-fs (loop4): Directory bread(block 34) failed [ 39.550959][ T3579] FAT-fs (loop4): Directory bread(block 35) failed [ 39.565070][ T3579] FAT-fs (loop4): Directory bread(block 36) failed [ 39.571797][ T3579] FAT-fs (loop4): Directory bread(block 37) failed [ 39.578945][ T3579] FAT-fs (loop4): Directory bread(block 38) failed [ 39.587887][ T3579] FAT-fs (loop4): Directory bread(block 39) failed [ 39.594704][ T3579] FAT-fs (loop4): Directory bread(block 40) failed [ 39.601672][ T3579] FAT-fs (loop4): Directory bread(block 41) failed [ 39.706460][ T3592] hub 2-0:1.0: USB hub found [ 39.711633][ T3592] hub 2-0:1.0: 8 ports detected [ 39.826162][ T3608] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.838113][ T3608] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.910641][ T3617] vhci_hcd: invalid port number 255 [ 39.987892][ T3624] loop1: detected capacity change from 0 to 2048 [ 40.026352][ T3631] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.049268][ T3624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.064093][ T3631] syz.3.69 (3631) used greatest stack depth: 10160 bytes left [ 40.102532][ T3637] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 40.170218][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.238087][ T3652] openvswitch: netlink: Message has 6 unknown bytes. [ 40.305377][ T3412] kernel write not supported for file /42/attr/exec (pid: 3412 comm: kworker/0:4) [ 40.584979][ T3702] batadv0: entered promiscuous mode [ 40.596100][ T3702] macvtap1: entered promiscuous mode [ 40.603870][ T3702] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 40.619695][ T3702] batadv0: left promiscuous mode [ 40.639568][ T3711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.105'. [ 40.814797][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811acdf200: rx timeout, send abort [ 40.823130][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811acdf200: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. Sep 10 00:34:45 syzkaller kern.alert kernel: [ 40.814797][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811acdf200: rx timeout, send abort [ 41.312526][ T3800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3800 comm=syz.1.146 [ 41.778130][ T3845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 41.804714][ T3845] Zero length message leads to an empty skb [ 42.461029][ T3936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 42.585986][ T3962] netlink: 'syz.4.222': attribute type 21 has an invalid length. [ 42.610033][ T3962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.222'. [ 42.619090][ T3962] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 43.415777][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.423117][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.483934][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.495214][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.543407][ T29] kauditd_printk_skb: 872 callbacks suppressed [ 43.543425][ T29] audit: type=1400 audit(2000000002.530:1005): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.601540][ T29] audit: type=1400 audit(2000000002.530:1006): avc: denied { allowed } for pid=4075 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 43.621144][ T29] audit: type=1400 audit(2000000002.530:1007): avc: denied { map_create } for pid=4075 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.640273][ T29] audit: type=1400 audit(2000000002.530:1008): avc: denied { map_create } for pid=4075 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.659498][ T29] audit: type=1400 audit(2000000002.530:1009): avc: denied { prog_load } for pid=4075 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.678739][ T29] audit: type=1400 audit(2000000002.540:1010): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.703131][ T29] audit: type=1400 audit(2000000002.550:1011): avc: denied { allowed } for pid=4077 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 43.722597][ T29] audit: type=1400 audit(2000000002.550:1012): avc: denied { map_create } for pid=4077 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.741896][ T29] audit: type=1400 audit(2000000002.550:1013): avc: denied { prog_load } for pid=4077 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 43.761159][ T29] audit: type=1400 audit(2000000002.570:1014): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.788543][ T4069] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 43.797859][ T174] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.807205][ T174] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.816925][ T4082] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 43.825535][ T4082] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 43.842167][ T174] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.854339][ T4086] can0: slcan on ttyS3. [ 43.860135][ T174] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.931583][ T4086] can0 (unregistered): slcan off ttyS3. [ 43.951328][ T4093] can0: slcan on ttyS3. [ 44.021659][ T4085] can0 (unregistered): slcan off ttyS3. [ 44.188664][ T4128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 44.197576][ T4128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 44.200925][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 44.845908][ T4210] team_slave_0: entered promiscuous mode [ 44.851782][ T4210] team_slave_1: entered promiscuous mode [ 44.883156][ T4210] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 44.934521][ T4218] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 45.484939][ T4243] mmap: syz.3.342 (4243) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.655559][ T4259] serio: Serial port ptm0 [ 45.893528][ T4287] capability: warning: `syz.1.369' uses deprecated v2 capabilities in a way that may be insecure [ 46.021805][ T4301] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 46.055076][ T4301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.375'. [ 46.162515][ T4317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 46.403446][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 46.600983][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 46.874064][ T4398] batadv_slave_0: entered promiscuous mode [ 46.916259][ T4398] syz_tun: entered promiscuous mode [ 47.369217][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 47.378292][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 47.537091][ T4486] netlink: 54775 bytes leftover after parsing attributes in process `syz.4.463'. [ 48.060594][ T4540] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 48.070838][ T4540] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.102956][ T4547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'. [ 48.324990][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 48.539272][ T4600] netlink: 'syz.2.518': attribute type 4 has an invalid length. [ 48.547138][ T4600] netlink: 17 bytes leftover after parsing attributes in process `syz.2.518'. [ 48.561529][ T29] kauditd_printk_skb: 20013 callbacks suppressed [ 48.561543][ T29] audit: type=1400 audit(2000000007.530:20956): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.563354][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.567919][ T29] audit: type=1400 audit(2000000007.530:20957): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.589095][ T3033] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 48.589129][ T3033] audit: backlog limit exceeded [ 48.602824][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.616943][ T29] audit: type=1400 audit(2000000007.530:20958): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.624728][ T3033] audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 [ 48.629682][ T29] audit: type=1400 audit(2000000007.530:20959): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.636226][ T3033] audit: backlog limit exceeded [ 49.014502][ T4659] ================================================================== [ 49.022649][ T4659] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 49.031291][ T4659] [ 49.033639][ T4659] write to 0xffff888118ea9828 of 8 bytes by task 4646 on cpu 1: [ 49.041293][ T4659] shmem_file_splice_read+0x470/0x600 [ 49.046790][ T4659] splice_direct_to_actor+0x26c/0x680 [ 49.052189][ T4659] do_splice_direct+0xda/0x150 [ 49.056982][ T4659] do_sendfile+0x380/0x650 [ 49.061452][ T4659] __x64_sys_sendfile64+0x105/0x150 [ 49.066701][ T4659] x64_sys_call+0x2bb0/0x2ff0 [ 49.071415][ T4659] do_syscall_64+0xd2/0x200 [ 49.075969][ T4659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.081886][ T4659] [ 49.084226][ T4659] write to 0xffff888118ea9828 of 8 bytes by task 4659 on cpu 0: [ 49.091958][ T4659] shmem_file_splice_read+0x470/0x600 [ 49.097974][ T4659] splice_direct_to_actor+0x26c/0x680 [ 49.103384][ T4659] do_splice_direct+0xda/0x150 [ 49.108166][ T4659] do_sendfile+0x380/0x650 [ 49.112606][ T4659] __x64_sys_sendfile64+0x105/0x150 [ 49.117967][ T4659] x64_sys_call+0x2bb0/0x2ff0 [ 49.122749][ T4659] do_syscall_64+0xd2/0x200 [ 49.127282][ T4659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.133186][ T4659] [ 49.135517][ T4659] value changed: 0x000000000000dd81 -> 0x000000000000ddb8 [ 49.142645][ T4659] [ 49.144980][ T4659] Reported by Kernel Concurrency Sanitizer on: [ 49.151158][ T4659] CPU: 0 UID: 0 PID: 4659 Comm: syz.4.540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.160896][ T4659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.170968][ T4659] ================================================================== [ 49.378671][ T4659] syz_tun (unregistering): left promiscuous mode [ 49.427184][ T294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.505634][ T294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.572472][ T294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.634765][ T294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.705225][ T294] bridge_slave_1: left allmulticast mode [ 49.710916][ T294] bridge_slave_1: left promiscuous mode [ 49.716714][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.725664][ T294] bridge_slave_0: left allmulticast mode [ 49.731332][ T294] bridge_slave_0: left promiscuous mode [ 49.737071][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.845180][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.856142][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.866039][ T294] bond0 (unregistering): Released all slaves [ 49.927036][ T294] hsr_slave_0: left promiscuous mode [ 49.932799][ T294] hsr_slave_1: left promiscuous mode [ 49.938567][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.946022][ T294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.953883][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.961566][ T294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.973507][ T294] veth1_macvtap: left promiscuous mode [ 49.979010][ T294] veth0_macvtap: left promiscuous mode [ 49.984718][ T294] veth1_vlan: left promiscuous mode [ 49.990005][ T294] veth0_vlan: left promiscuous mode [ 50.065562][ T294] team0 (unregistering): Port device team_slave_1 removed [ 50.078400][ T294] team0 (unregistering): Port device team_slave_0 removed [ 50.398621][ T294] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.425419][ T294] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.485315][ T294] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.553444][ T294] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.632814][ T294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.695446][ T294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.755383][ T294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.815524][ T294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.102944][ T294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.184233][ T294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.224773][ T294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.265730][ T294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.341597][ T294] bond1: left allmulticast mode [ 51.346499][ T294] bond1: left promiscuous mode [ 51.351428][ T294] bridge0: port 3(bond1) entered disabled state [ 51.358880][ T294] bridge_slave_1: left allmulticast mode [ 51.364657][ T294] bridge_slave_1: left promiscuous mode [ 51.370412][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.379357][ T294] bridge_slave_0: left allmulticast mode [ 51.385095][ T294] bridge_slave_0: left promiscuous mode [ 51.390736][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.400479][ T294] bridge_slave_1: left allmulticast mode [ 51.406258][ T294] bridge_slave_1: left promiscuous mode [ 51.412014][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.421124][ T294] bridge_slave_0: left allmulticast mode [ 51.426952][ T294] bridge_slave_0: left promiscuous mode [ 51.432829][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.442576][ T294] bridge_slave_1: left allmulticast mode [ 51.448368][ T294] bridge_slave_1: left promiscuous mode [ 51.454080][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.462754][ T294] bridge_slave_0: left allmulticast mode [ 51.468489][ T294] bridge_slave_0: left promiscuous mode [ 51.474274][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.483440][ T294] bridge_slave_1: left allmulticast mode [ 51.489106][ T294] bridge_slave_1: left promiscuous mode [ 51.494828][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.503736][ T294] bridge_slave_0: left allmulticast mode [ 51.509422][ T294] bridge_slave_0: left promiscuous mode [ 51.515106][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.665385][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.676344][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.686667][ T294] bond0 (unregistering): Released all slaves [ 51.696502][ T294] bond1 (unregistering): Released all slaves [ 51.776244][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.786413][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.797412][ T294] bond0 (unregistering): Released all slaves [ 51.873148][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.882559][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.892324][ T294] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 51.901111][ T294] bond0 (unregistering): Released all slaves [ 51.974507][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.985740][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.996267][ T294] bond0 (unregistering): Released all slaves [ 52.073738][ T294] batadv_slave_0: left promiscuous mode [ 52.082747][ T294] hsr_slave_0: left promiscuous mode [ 52.088572][ T294] hsr_slave_1: left promiscuous mode [ 52.094747][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.102241][ T294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.111040][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.118645][ T294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.130497][ T294] hsr_slave_0: left promiscuous mode [ 52.136447][ T294] hsr_slave_1: left promiscuous mode [ 52.143190][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.150582][ T294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.158653][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.166156][ T294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.177260][ T294] hsr_slave_0: left promiscuous mode [ 52.191464][ T294] hsr_slave_1: left promiscuous mode [ 52.197188][ T294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.206036][ T294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.216308][ T294] hsr_slave_0: left promiscuous mode [ 52.223208][ T294] hsr_slave_1: left promiscuous mode [ 52.229033][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.236455][ T294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.245262][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.252735][ T294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.270538][ T294] veth1_macvtap: left promiscuous mode [ 52.276347][ T294] veth0_macvtap: left promiscuous mode [ 52.283439][ T294] veth1_vlan: left promiscuous mode [ 52.288877][ T294] veth0_vlan: left promiscuous mode [ 52.295498][ T294] team_slave_0: left promiscuous mode [ 52.300960][ T294] team_slave_1: left promiscuous mode [ 52.308064][ T294] veth1_macvtap: left promiscuous mode [ 52.314008][ T294] veth0_macvtap: left promiscuous mode [ 52.319605][ T294] veth1_vlan: left promiscuous mode [ 52.325921][ T294] veth0_vlan: left promiscuous mode [ 52.331791][ T294] veth1_macvtap: left promiscuous mode [ 52.337376][ T294] veth0_macvtap: left promiscuous mode [ 52.343873][ T294] veth1_vlan: left promiscuous mode [ 52.349118][ T294] veth0_vlan: left promiscuous mode [ 52.506219][ T294] team0 (unregistering): Port device team_slave_1 removed [ 52.516439][ T294] team0 (unregistering): Port device team_slave_0 removed [ 52.586199][ T294] team0 (unregistering): Port device team_slave_1 removed [ 52.597275][ T294] team0 (unregistering): Port device team_slave_0 removed [ 52.663070][ T294] team0 (unregistering): Port device team_slave_1 removed [ 52.673626][ T294] team0 (unregistering): Port device team_slave_0 removed [ 52.738798][ T294] team0 (unregistering): Port device team_slave_1 removed [ 52.750177][ T294] team0 (unregistering): Port device team_slave_0 removed [ 53.572686][ T29] kauditd_printk_skb: 42239 callbacks suppressed [ 53.572702][ T29] audit: type=1400 audit(2000000012.550:59713): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.588145][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.600331][ T29] audit: type=1400 audit(2000000012.560:59714): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.606855][ T3033] audit: audit_lost=1189 audit_rate_limit=0 audit_backlog_limit=64 [ 53.606923][ T3033] audit: backlog limit exceeded [ 53.607435][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.628055][ T29] audit: type=1400 audit(2000000012.560:59715): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.636032][ T3033] audit: audit_lost=1190 audit_rate_limit=0 audit_backlog_limit=64 [ 53.640882][ T29] audit: type=1400 audit(2000000012.560:59716): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.647481][ T3033] audit: backlog limit exceeded [ 58.581400][ T29] kauditd_printk_skb: 52609 callbacks suppressed [ 58.581418][ T29] audit: type=1400 audit(2000000017.560:110106): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.589473][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.609431][ T29] audit: type=1400 audit(2000000017.570:110107): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.615713][ T3033] audit: audit_lost=1931 audit_rate_limit=0 audit_backlog_limit=64 [ 58.636937][ T29] audit: type=1400 audit(2000000017.570:110108): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.644895][ T3033] audit: backlog limit exceeded [ 58.666105][ T29] audit: type=1400 audit(2000000017.570:110109): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.671683][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.692167][ T29] audit: type=1400 audit(2000000017.570:110110): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.698676][ T3033] audit: audit_lost=1932 audit_rate_limit=0 audit_backlog_limit=64